admin/GobyVuls
1
0 Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2026-10-28 19:40:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add CRMEB DaTong sid sqli

Browse Source
This commit is contained in:
xiaoheihei1107 authored and GitHub committed 2021-09-16 18:00:33 +08:00
1 parent 8a8a52f406
commit ca0126af9b
1 file changed
+9
Download Patch File Download Diff File Expand all files Collapse all files
CRMEB/DaTong_sid_sqli/README.md
+9
View File
@@ -0,0 +1,9 @@
# CRMEB DaTong sid sqli
CRMEB open version v4 is a free and open source mall system, UINAPP+thinkphp6 framework mall. The sid parameter under the path of CRMEB open version /api/products has unfiltered SQL statement splicing, resulting in SQL injection.
FOFA **query rule**: [body="CRMEB" && body="/h5/js/app"](https://fofa.so/result?qbase64=Ym9keT0iQ1JNRUIiICYmIGJvZHk9Ii9oNS9qcy9hcHAi)
# Demo
![CRMEB_DaTong_sid_sqli](CRMEB_DaTong_sid_sqli.gif)