ZDSoft教育信息发布系统后台 /user/infoSearch.aspx 参数searchStr SQL 注入漏洞

Follow 0

Basic Fields

SSV ID:: SSV-90686

Find Time:: 2015-07-12

Submit Time:: 2016-01-28

Level:

Category:: SQL 注入

Component:: ZDSoft

Author:: Unknown

Submitter:: kikay

CVE-ID：: Add

CNNVD-ID：: Add

CNVD-ID：: Add

ZoomEye Dork：: Add

Source

Login to see

Detail

Contributor wikeys Got 0KB

Login to see

have 0 exchange

PoC (pocsuite 插件) (pocsuite 插件)

Contributor kikay totally have 4KB

Login to see

have 2 Exchange

Reference Linking

Login to see

Solutions

Login to see

All Comments (1)

anonymous 2018-05-07

POC似乎只是验证而已，并没有读取数据库的相关操作
- kikay
  这个漏洞是后台的，需要登录，然后exploit又读取数据库相关信息的操作啊
Reply 1 0
1F

※Any content provided by this site, only to learn the code and services, not for illegal purposes