漏洞描述
【漏洞对象】京伦OA系统 【漏洞描述】该产品下/Systems/menu/func.aspx文件ChannelId参数存在SQL注入，可造成数据泄露，甚至服务器被入侵。
京伦OA系统func.aspx页面ChannelId参数-SQL注入
PoC代码
暂无相关漏洞推荐
- SIM /api/function/execute 代码执行漏洞
- VICIdial /VERM/VERM_AJAX_functions.php SQL 注入漏洞（CVE-2024-8503）
- POC CVE-2024-33605: Sharp Multifunction Printers - Directory Listing
- POC CVE-2024-33610: Sharp Multifunction Printers - Cookie Exposure
- POC azure-functionapp-access-keys-missing: Azure Function Access Keys Configuration
- POC azure-functionapp-admin-privileges: Azure Functions with Admin Privileges
- POC azure-functionapp-appinsights-missing: Application Insights Integration for Azure Function Apps
- POC azure-functionapp-public-exposure: Exposed Azure Functions
- POC azure-functionapp-system-assigned-missing: System-Assigned Managed Identities for Azure Functions
- POC azure-functionapp-user-assigned-id-missing: User-Assigned Managed Identities for Azure Functions
- POC azure-functionapp-vnet-integration-missing: Virtual Network Integration for Azure Functions Not Enabled
- POC aero-cms-front-end-search-function-sql-Injection: AeroCMS v0.0.1 前端搜索功能sql注入漏洞
- POC gcloud-func-auto-runtime-updates-disabled: Automatic Runtime Security Updates Disabled in Google Cloud Functions