WooYun.org

http://sws.suning.com/

搜索1

搜索1'

加载失败,原因：PreparedStatementCallback; bad SQL grammar [SELECT COUNT(*) count FROM T_WORK_ORDER WHERE STATUS = 1 AND USER_ID = ? AND (UUID like '%1'%' OR TITLE like '%1'%') ]; nested exception is com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '%' OR TITLE like '%1'%')' at line 1