{
  "Name": "Metinfo met_download_list SQL time delay injection",
  "Description": "Failure to perform effective filtering, leading to SQL injection vulnerabilities",
  "Product": "Metinfo",
  "Homepage": "www.metinfo.cn",
  "DisclosureDate": "2017-06-16",
  "Author": "mahui@gobies.org",
  "FofaQuery": "app=\"MetInfo\"",
  "Level": "2",
  "Impact": "<p>可注入服务器数据库敏感信息</p>",
  "Recommandation": "<p>过滤</p>",
  "References": [
    "https://fofa.so"
  ],
  "HasExp": true,
  "ExpParams": [
		{
			"name": "runSql",
			"type": "select",
			"value": "user(),version(),database()"
		}
	],
  "ExpTips": {
    "Type": "",
    "Content": ""
  },
  "ScanSteps": null,
  "ExploitSteps": null,
  "Tags": ["sqli"],
  "CVEIDs": null,
  "CVSSScore": null,
  "AttackSurfaces": {
    "Application": ["Metinfo"],
    "Support": null,
    "Service": null,
    "System": null,
    "Hardware": null
  },
"Disable": false
}