某政府系统通用SQL盲注#1(影响大量政府)

### 简要描述： RT ### 详细说明： 官网:http://www.jit.com.cn/ http://218.27.140.5/zwdtSjgl/Directory/depListXX.jsp?department_id=B02C579&department_name=%CA%E6%C0%BC%CA%D0%C3%F1%D5%FE%BE%D6&department_Type=1 http://218.27.190.107:8080/zwdtSjgl/Directory/depListXX.jsp?department_id=DE200804031151000109&department_name=%CA%D0%C3%F1%D5%FE%BE%D6&department_Type=1 http://www.jlfm.gov.cn:8081/zwdtSjgl/Directory/depListXX.jsp?department_id=AAB156&department_name=%B7%E1%C2%FA%C7%F8%BD%CC%D3%FD%BE%D6&department_Type=1 http://139.209.60.6/zwdtSjgl/Directory/depListXX.jsp?department_id=DE200804031235200968&department_name=%CA%D0%D0%C5%B7%C3%B0%EC&department_Type=1 http://61.138.128.150:8080/zwdtSjgl/Directory/depListXX.jsp?department_id=AA335&department_name=%BC%AA%C1%D6%BA%A3%B9%D8&department_Type=1 http://125.32.42.176/zwdtSjgl/Directory/depListXX.jsp?department_id=AA2B359&department_name=%F2%D4%BA%D3%CA%D0%D6%CA%C1%BF%BC%BC%CA%F5%BC%E0%B6%BD%BE%D6&department_Type=1 http://222.160.65.182:8000/zwdtSjgl/Directory/depListXX.jsp?department_id=4028818231752c5c013178d7f2f80049&department_name=%B7%F6%D3%E0%CA%D0%C8%CB%C1%A6%D7%CA%D4%B4%BA%CD%C9%E7%BB%E1%B1%A3%D5%CF%BE%D6&department_Type=1 http://222.160.65.182:8000/zwdtSjgl/Directory/depListXX.jsp?department_id=4028818231752c5c013178d47a5c0007&department_name=%B7%F6%D3%E0%CA%D0%B2%D0%C1%AA&department_Type=1 http://218.62.86.138/zwdtSjgl/Directory/depListXX.jsp?department_id=AAB248&department_name=%E8%EB%B5%E9%CA%D0%B3%A3%C9%BD%D5%F2%D5%FE%B8%AE&department_Type=1 http://58.244.248.90:81/zwdtSjgl/Directory/depListXX.jsp?department_id=4028816f33f8696e0133fd6a968b0105&department_name=%CB%AB%C1%C9%CA%D0%B9%A9%B5%E7%BE%D6&department_Type=1 1.测试注入点:http://218.27.140.5/zwdtSjgl/Directory/depListXX.jsp?department_id=B02C579&department_name=%CA%E6%C0%BC%CA%D0%C3%F1%D5%FE%BE%D6&department_Type=1 [<img src="https://images.seebug.org/upload/201501/24202722d6e76621c2cb8cc6e1dd5ceab1b63d39.png" alt="1.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201501/24202722d6e76621c2cb8cc6e1dd5ceab1b63d39.png) 2.测试注入点：http://58.244.248.90:81/zwdtSjgl/Directory/depListXX.jsp?department_id=4028816f33f8696e0133fd6a968b0105&department_name=%CB%AB%C1%C9%CA%D0%B9%A9%B5%E7%BE%D6&department_Type=1 [<img src="https://images.seebug.org/upload/201501/242038511dbfce591ccddacaddbffe8b8727ab7d.png" alt="2.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201501/242038511dbfce591ccddacaddbffe8b8727ab7d.png) 我也不深入测试了,都存在注入的。 ### 漏洞证明： 1.测试注入点:http://218.27.140.5/zwdtSjgl/Directory/depListXX.jsp?department_id=B02C579&department_name=%CA%E6%C0%BC%CA%D0%C3%F1%D5%FE%BE%D6&department_Type=1 [<img src="https://images.seebug.org/upload/201501/24202722d6e76621c2cb8cc6e1dd5ceab1b63d39.png" alt="1.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201501/24202722d6e76621c2cb8cc6e1dd5ceab1b63d39.png) 2.测试注入点：http://58.244.248.90:81/zwdtSjgl/Directory/depListXX.jsp?department_id=4028816f33f8696e0133fd6a968b0105&department_name=%CB%AB%C1%C9%CA%D0%B9%A9%B5%E7%BE%D6&department_Type=1 [<img src="https://images.seebug.org/upload/201501/242038511dbfce591ccddacaddbffe8b8727ab7d.png" alt="2.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201501/242038511dbfce591ccddacaddbffe8b8727ab7d.png)