### 简要描述： RT ### 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用多个案例来测试。 注入链接是： searchTypeDir.jsp?department_id= 案例： http://222.160.140.29:8000/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=DE200804031229450156&department_name=市民族事务委员会&department_Type=1&title1code=12&typeDirName=年度政府信息公开工作报告 http://218.62.109.219:8000/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=8a8a8a8a2f328744012f328bd0640033&department_name=安监局%20%20&department_Type=1&title1code=12&typeDirName=年度政府信息公开工作报告 http://61.138.128.150:8080/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=AA297&department_name=吉林市畜牧业管理局&department_Type=1&title1code=12&typeDirName=年度政府信息公开工作报告 http://218.62.90.168/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=402827812c1af4a6012c20443218009c&department_name=图们市广播电视管理局&department_Type=1 http://zwgk.wangqing.gov.cn/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=4aef2fbd2c814021012c8145c6730002&department_name=汪清镇人民政府&department_Type=1...
### 简要描述： RT ### 详细说明： 吉大正元信息技术股份有限公司:http://www.jit.com.cn/ 众多政府网站都在使用该系统 我就用多个案例来测试。 注入链接是： searchTypeDir.jsp?department_id= 案例： http://222.160.140.29:8000/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=DE200804031229450156&department_name=市民族事务委员会&department_Type=1&title1code=12&typeDirName=年度政府信息公开工作报告 http://218.62.109.219:8000/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=8a8a8a8a2f328744012f328bd0640033&department_name=安监局%20%20&department_Type=1&title1code=12&typeDirName=年度政府信息公开工作报告 http://61.138.128.150:8080/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=AA297&department_name=吉林市畜牧业管理局&department_Type=1&title1code=12&typeDirName=年度政府信息公开工作报告 http://218.62.90.168/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=402827812c1af4a6012c20443218009c&department_name=图们市广播电视管理局&department_Type=1 http://zwgk.wangqing.gov.cn/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=4aef2fbd2c814021012c8145c6730002&department_name=汪清镇人民政府&department_Type=1 http://122.140.89.254/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=DE200812231009110359&department_name=市科技局&department_Type=1 http://218.27.147.134/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=AAB653&department_name=永吉县食品药品监督管理局&department_Type=1&title1code=13&typeDirName=年度政府信息公开工作报告 http://www.jlfm.gov.cn:8081/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=AAB182&department_name=丰满区泰山街道办事处&department_Type=1 http://218.62.86.138/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=AAB274&department_name=桦甸市财政局&department_Type=1&title1code=13&typeDirName=年度政府信息公开工作报告 http://58.244.248.90:81/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=4028816f33f8696e0133fd57e33000ca&department_name=双辽市安全生产监督管理局&department_Type=1&title1code=11&typeDirName=年度政府信息公开工作报告 http://218.62.81.171/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=AABB504&department_name=磐石市广播电影电视局&department_Type=1 http://www.ilj.gov.cn/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=5a9b4f952ced360c012cedd29034000c&department_name=龙井市审计局&department_Type=1&title1code=12&typeDirName=年度政府信息公开工作报告 ### 漏洞证明： http://www.jlfm.gov.cn:8081/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=AAB182&department_name=丰满区泰山街道办事处&department_Type=1 [<img src="https://images.seebug.org/upload/201503/0923363656b182e5e2043a8428de1e71754b66fd.jpg" alt="QQ图片20150309233511.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201503/0923363656b182e5e2043a8428de1e71754b66fd.jpg) [<img src="https://images.seebug.org/upload/201503/09233656dffc495e24777804868fb5c721adfd81.png" alt="QQ图片20150309233529.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201503/09233656dffc495e24777804868fb5c721adfd81.png) http://218.62.81.171/zwdtSjgl/Directory/searchTypeDir.jsp?department_id=AABB504&department_name=磐石市广播电影电视局&department_Type=1 [<img src="https://images.seebug.org/upload/201503/10000803182fae93a0361b699fe265c9abea8907.jpg" alt="QQ图片20150310000636.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201503/10000803182fae93a0361b699fe265c9abea8907.jpg) [<img src="https://images.seebug.org/upload/201503/10000824ac3fa8df16e0c5ba3b6f08ac639e2717.jpg" alt="QQ图片20150310000652.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201503/10000824ac3fa8df16e0c5ba3b6f08ac639e2717.jpg)
