Two Error-Based SQLi in courses.aspx on ██████████
该报告还没有中文解读。
原文摘录
摘自原文（4298 字符中的一小部分）
**Summary:** The server at ████ contains two SQL injection vulnerabilities in the `courses.aspx` file. These are error-based SQLi vulnerabilities. The resulting errors reveal seven lines of C# code, including inline SQL which reveals internal database information. Note that this is one of two …
原文中的代码
Line 173: sqlcrs = CCommonServices.GetCourseSQL(Request.QueryString("crs_id"))
Line 174: rscrs.open(sqlcrs, connectionString)
Line 175: sqlCrcf = "SELECT Career_Field.CF_Name FROM Career_CORE_PLUS Join Career_Field on Career_Field.CF_ID = Career_CORE_PLUS.CF_ID join CRS_Detail …默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 U.S. Dept Of Defense 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @tcpiplab · 版权归作者与 U.S. Dept Of Defense 所有