admin/wy876_POC
1
0
Fork 0
mirror of https://github.com/wy876/POC.git synced 2025-02-27 04:39:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update 中远麒麟堡垒机SQL注入.md

Browse Source
This commit is contained in:
wy876 2023-09-14 17:51:46 +08:00 committed by GitHub
parent f80901504a
commit 6923d788e3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
中远麒麟堡垒机SQL注入.md
View File

@ -2,7 +2,8 @@
麒麟堡垒机用于运维管理的认证、授权、审计等监控管理。中远麒麟堡垒机存在SQL注入，可利用该漏洞获取系统敏感信息。
检索条件：
## 检索条件：
cert="Baolei" 或 title="麒麟堡垒机" 或 body="admin.php?controller=admin_index&action=get_user_login_fristauth"
或 body="admin.php?controller=admin_index&action=login"