SQL Injection somewhere on the oyi website

Aoyi is a large-scale comprehensive website ~ Not too many tests ~ SQL Injection: http://www.oeeee.com/fh/ks_list.aspx? Ks = % C4 % D0 % BF % C6 & ty = anli ran the tool and found that the injection point was sysadmin permission ~ Okay ~ Everyone understands this ~ Cross-database query is supported. The Action database has more than 700 tables, you know ~ A large amount of information; trswcm52 inventory of ftp users, passwords;


Very male background, unauthorized access ~ In addition, part of the background external access, and easy to guess; http://wapadmin.oeeee.com/login.aspx http://manage.oeeee.com/http://shop.oeeee.com/admin/privilege.php? Act = login