推理: AppScan 接收到“超时”响应,指示注入的“Sleep”命令已成功
GET /index.php?
m=wap&siteid=1&a=big_image&url=dXBsb2FkZmlsZS8yMDE3LzEwMjAvMjAxNzEwMjAxMDE1Mzk1MTEuanBn$(../../..
/../../../../../../../../../bin/sleep%2011)&w= HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
这个怎么处理,求教啊,急 |
|