Skip to content

jfinal_ CMS 5.1.0 SQL injection #43

New issue
New issue
Open
Open
jfinal_ CMS 5.1.0 SQL injection#43
@zftishack

Description

@zftishack
zftishack
opened on Jun 27, 2022

There is a SQLI vul in background mode.The route is as following
1

vulnerable argument passing is as following
2

I try to grab packets
Inject at orderby
3
4

Discovery injection
5

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions