Information leakage caused by SQL Injection on the Employment Service Platform of Beijing Dance College

1. SQL Injection exists on the Employment Service Platform page of Beijing Dance College
2. Weak background administrator passwords and plaintext Password Storage for all accounts
3. webpage hidden links and Trojans
4. Student Information Leakage
Detailed description:
Injection point: http://jy.bda.edu.cn/show_news.asp? Bh = 239
 



Www.2cto.com
Go to the background to view the basic employment information of Students
 
 
Suyan beauty!
 
 
The leaked student ID is displayed at http://jsf-bda.edu.cn/educational administration system.