关键信息 漏洞描述 漏洞类型: SQL注入 (SQLi) 受影响系统: Life Insurance Management System v1.0 受影响文件: /insertPayment.php 参数: receipt_no 厂商信息 厂商: projectworlds 软件链接: Life Insurance Management System in PHP POC (概念验证) HTTP请求: SQLMap命令: 漏洞细节 参数: receipt_no (POST) 类型: - Error-based - Time-based blind MySQL版本要求: - Error-based: >= 5.6 - Time-based blind: >= 5.0.12