1 2 3 0 6 a sub-site at Oracle blind injection+background leakage+a bypass vulnerability-vulnerability warning-the black bar safety net

1. mail. 1 2 3 0 6. cn an Oracle blind injection: the domain parameter is not filtered, causing the injection,can be according to the query returns the time to guess the solution. POST http://mail.12306.cn/app/mail/login domain=aaa'XORifselect 1 from...