WooYun.org

GET /login.cgi?act=login&user_name=admin*&user_pwd=admin&lang=zh_CN.UTF-8&t=0.9077004473656416&loginflag=1&ajax_rnd=01533054909668862846&user_name=[object%20HTMLInputElement]&session_id=undefined&lang=[object%20HTMLSelectElement] HTTP/1.1
Host: 58.216.48.122
Connection: keep-alive
User-Agent: Opera/9.80 (Windows NT 6.0) Presto/2.12.388 Version/12.14
Accept: */*
Referer: https://58.216.48.122/
Accept-Encoding: gzip, deflate, sdch
Accept-Language: zh-CN,zh;q=0.8

1.北京启明星辰信息安全技术有限公司：
天玥网络安全审计系统
https://222.88.158.29/
https://113.0.190.142/
https://218.66.50.69/
https://220.163.86.130/
https://61.177.183.195/
https://222.88.66.61/
https://222.88.226.83/
https://222.88.94.91/
https://123.149.245.95/
https://61.235.67.80/
https://222.88.66.168/
https://222.88.85.102/
https://117.158.136.93/
https://60.8.150.18/
https://222.85.76.160/
https://171.8.149.229/
https://220.170.147.180/
https://60.191.16.226/
https://125.71.235.246/
https://222.89.193.2/
https://222.89.138.189/
https://222.89.193.11/
Netoray NSG 上网行为管理系统
https://219.150.116.47/
https://222.88.183.205/
https://222.88.100.246/
https://222.89.7.211/
2.莱克斯科技（北京）有限公司：
Netoray SMB 企业易网通
https://202.106.10.218/
https://123.134.190.186/
https://114.255.57.66/
https://222.173.106.218/
https://218.241.204.178/
https://219.146.50.58/
https://58.30.48.194/
https://211.95.26.6/
Netoray NSG 上网行为管理系统
https://211.167.39.242/
https://113.31.23.187/
https://124.202.216.10/
https://222.128.55.52/
https://202.108.49.67/
https://119.255.192.18/
https://117.74.77.4/
https://218.26.97.232/
https://218.240.12.4/
https://61.163.193.195/
https://124.207.17.66/
https://121.26.229.34/
https://124.207.17.73/
https://1.56.84.230/
https://60.216.16.84/
Netoray TOG 莱克斯带宽管理系统 V5.0
https://111.40.0.39/
3.网神信息技术（北京）股份有限公司：
SecFox 安全管理系统
https://222.249.128.82/
https://60.190.157.106/
https://219.140.189.218/
https://59.174.31.214/
https://218.28.77.102/
https://120.203.0.94/
https://58.216.199.226/
https://60.29.35.34/
https://218.3.206.2/
https://220.179.61.136/
https://211.141.217.26/
https://www.wuhuyizhong.com/
4.汉柏科技有限公司：
poweraegis 5500 上网行为管理系统
https://218.26.189.237/
https://222.223.233.43/
https://58.30.140.120/
5.上讯信息技术有限公司：
InforCube NSG 上讯上网行为管理系统
https://120.194.82.54/
6.神州数码控股有限公司：
神州数码上网行为管理系统
https://220.179.227.46/
https://124.112.209.219/
https://218.23.219.249/
https://124.112.209.196/
https://124.112.209.9/
https://218.22.200.174/
https://60.173.119.86/
https://221.212.213.5/
https://60.173.107.109/
https://xcshx.com/
https://60.173.127.158/
7.成都飞鱼星科技开发有限公司：
VOLANS SR上网行为审计网关
https://221.13.108.150/
8.北京瑞星信息技术有限公司
瑞星上网行为管理系统
https://211.157.136.10/
https://220.178.0.12/
9.北京网御星云信息技术有限公司
网御上网行为管理系统 Leadsec ACM
https://60.29.18.211:8443/
10.北京网睿兴安技术有限公司
网睿兴安日志系统
https://120.131.74.120/
11.成都艺创科技有限公司
艺创专业上网行为管理设备 e-strong ibm
https://211.103.207.194/
12.不知名厂商
系统标题为：上网行为管理系统
https://121.28.150.154/
https://218.2.102.93/
13.不知名厂商
系统标题为：网络行为管理系统
https://222.221.55.86/
https://61.182.80.4/
https://220.249.190.137/
https://www.xigong.gov.cn/
https://221.13.140.87/
https://218.77.185.204/
https://xn--fiq61ix3lnwbrylwjnuql.com/
https://59.49.145.42/
https://xn--fiq61ix3lnwbrylwjnuql.net/
https://www.qhxz.gov.cn/
https://222.223.116.200/
https://122.81.246.42/
14.东软集团股份有限公司
nesoft 上网行为管理系统
https://58.216.48.122/

还有一处就是“找回密码”处也存在SQL注入文件名recovery_passwd.cgi参数username