b1u3s

**请先认真阅读下列要求，如不符合会被直接关闭 PR** - 确保当前 POC 与已有的 POC 没有重复，除了仓库 `pocs` 目录中的，还有内置的几个用 Go 写的 POC也不要重复： ``` poc-go-php-cve-2019-11043-rce poc-go-seeyon-htmlofficeservlet-rce poc-go-tongda-lfi-upload-rce poc-go-tongda-arbitrary-auth poc-go-ecology-dbconfig-info-leak poc-go-tomcat-put poc-go-tomcat-cve-2020-1938 ``` - 阅读规范和要求 - https://chaitin.github.io/xray/#/guide/contribute - https://chaitin.github.io/xray/#/guide/high_quality_poc - 一个...

#### Description I found a SQL inject vulnerability in page categorymenu.php and I build a local environment to test it. The url is http://127.0.0.1/PHP-CMS/categorymenu.php  The problem code is here....