https://pwnwiki.com/index.php?action=history&feed=atom&title=%E4%B8%80%E5%8D%A1%E9%80%9A%E4%BF%A1%E6%81%AF%E7%AE%A1%E7%90%86%E7%B3%BB%E7%B5%B1_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%2Fzh-hant
一卡通信息管理系統 SQL注入漏洞/zh-hant - Revision history
2026-04-07T20:21:20Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=%E4%B8%80%E5%8D%A1%E9%80%9A%E4%BF%A1%E6%81%AF%E7%AE%A1%E7%90%86%E7%B3%BB%E7%B5%B1_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E/zh-hant&diff=6965&oldid=prev
Pwnwiki: Created page with "==弱口令=="
2021-07-10T08:18:04Z
<p>Created page with "==弱口令=="</p>
<p><b>New page</b></p><div><languages /><br />
<br />
<center><br />
{| style="border: 2.0px solid grey; background: #b3ff9c;" width="85%"<br />
| align="center" width="60px"| [[File:Check.png|link=|55px]]<br />
| align="center" |'''該漏洞已通過驗證'''<br />
------<br />
<small>本頁面的EXP/POC/Payload經測試可用，漏洞已經成功復現。</small><br />
|}<br />
</center><br />
==漏洞信息==<br />
此系統存在默認弱口令，以及前台sql注入。<br />
==FOFA==<br />
<pre><br />
"Content/images/login/logo.png" && "/Content/js/core/knockout-2.2.1.js"<br />
</pre><br />
<br />
==弱口令==<br />
<pre><br />
super<br />
<br />
1234<br />
</pre><br />
<br />
==SQL注入==<br />
<br />
用戶名處存在SQL注入漏洞，使用BurpSuite插件利用（在用戶名處加入<code>*</code>）。<br />
<br />
https://github.com/c0ny1/sqlmap4burp-plus-plus/<br />
<br />
<br />
==參考==<br />
https://mp.weixin.qq.com/s/zxxOWSYgzY-z8GbBxEP_TQ</div>
Pwnwiki