Greetings:
Oh very feel shy, injection parameter "lib, docnum"
[0] place: GET, parameter: docnum, type: Single quoted string (default)
[1] place: GET, parameter: lib, type: Single quoted string
Replace "lib, docnum" parameter value with "AND 6012=6012AND'SM'='SM'"
Could you update information. Thank you.
Shady.liu
DBAppSecurity Co.Ltd.
-------------------------------------------------------------------------
Email:shady....@dbappsecurity.com.cn
----------------------------------------------------------
----------------------------------------------------------
_______________________________________________ Sent through the Full Disclosure mailing list http://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
