This article discusses a SQL injection attack on the ‘正方教务系统’ (Xiàngfāng Jiaodǎo Xìtǐng) using an ASMX URL. The text proposes utilizing this vulnerability as a means of retaliation against a school.

通过url遍历得到asmx结尾的url进行注入 如果你要进行报复学校这个看起来很不错

Comments