泛微E-office注入篇之无需登陆注射第1-20处

摘要

文件位置：/E-mobile/flowdo_page.php注入点:
http://eoffice8.weaver.cn:8028/E-mobile/flowdo_page.php?diff=delete&RUN_ID=1 //参数RUN_ID
http://eoffice8.weaver.cn:8028/E-mobile/flowdo_page.php?diff=delete&flowid=1 //参数flowid

文件位置：/E-mobile/flowdo_page.php

注入点:
http://eoffice8.weaver.cn:8028/E-mobile/flowdo_page.php?diff=delete&RUN_ID=1 //参数RUN_ID
http://eoffice8.weaver.cn:8028/E-mobile/flowdo_page.php?diff=delete&flowid=1 //参数flowid

文件位置:/E-mobile/flowsorce_page.php
注入点:
http://eoffice8.weaver.cn:8028/E-mobile/flowsorce_page.php?flowid=2

文件位置：/E-mobile/flownext_page.php
注入点:
http://eoffice8.weaver.cn:8028/E-mobile/flownext_page.php?diff=candeal&detailid=2,3 //参数detailid

文件位置:/E-mobile/flowimage_page.php
注入点:
http://eoffice8.weaver.cn:8028/E-mobile/flowimage_page.php?FLOW_ID=2

文件位置:/E-mobile/flowform_page.php
注入点:
http://eoffice8.weaver.cn:8028/E-mobile/flowform_page.php?FLOW_ID=2

文件位置:/E-mobile/diaryother_page.php
注入点:
http://eoffice8.weaver.cn:8028/E-mobile/diaryother_page.php?searchword=23

文件位置:/E-mobile/create/ajax_do.php
注入点:
http://eoffice8.weaver.cn:8028/E-mobile/create/ajax_do.php?diff=word&sortid=1 //参数sortid
http://eoffice8.weaver.cn:8028/E-mobile/create/ajax_do.php?diff=word&idstr=2 //参数idstr
http://eoffice8.weaver.cn:8028/E-mobile/create/ajax_do.php?diff=addr&sortid=1 //参数sortid
http://eoffice8.weaver.cn:8028/E-mobile/create/ajax_do.php?diff=addr&userdept=1 //参数userdept
http://eoffice8.weaver.cn:8028/E-mobile/create/ajax_do.php?diff=addr&userpriv=1 //参数userpriv
http://eoffice8.weaver.cn:8028/E-mobile/create/ajax_do.php?diff=wordsearch&idstr=1 //参数idstr

文件位置:/E-mobile/flow/flowhave_page.php
注入点:
http://eoffice8.weaver.cn:8028/E-mobile/flow/flowhave_page.php?detailid=2,3

文件位置:/E-mobile/flow/flowtype_free.php
注入点:
http://eoffice8.weaver.cn:8028/E-mobile/flow/flowtype_free.php?flowid=1
http://eoffice8.weaver.cn:8028/E-mobile/flow/flowtype_free.php?runid=1

文件位置:/E-mobile/flow/flowtype_other.php
注入点:
http://eoffice8.weaver.cn:8028/E-mobile/flow/flowtype_other.php?flowid=1
http://eoffice8.weaver.cn:8028/E-mobile/flow/flowtype_other.php?runid=1

文件位置:/E-mobile/flow/freeflowimage_page.php

注入点:
http://eoffice8.weaver.cn:8028/E-mobile/flow/freeflowimage_page.php?fromid=2
http://eoffice8.weaver.cn:8028/E-mobile/flow/freeflowimage_page.php?diff=new&runid=2 //参数runid