漏洞描述 泛微云桥e-BridgeOA是一种基于云计算和移动互联网技术的企业办公自动化(OA)解决方案。它由中国的企业软件开发公司泛微软件开发,旨在帮助企业实现高效的办公管理和协同工作。泛微云桥e-Bridge addTasteJsonp 接口存在SQL注入漏洞,攻击者可获取数据库敏感信息
相关漏洞推荐 ecology-ebridge-addtaste-sqli: 泛微云桥 taste/addTaste SQL注入 POC CVE-2020-11853: Micro Focus Operations Bridge Manager <=2020.05 - Remote Code Execution POC CVE-2021-22502: Micro Focus Operations Bridge Reporter - Remote Code Execution POC CVE-2021-25112: WordPress WHMCS Bridge <6.4b - Cross-Site Scripting POC CVE-2025-4008: MeteoBridge <= 6.1 - Remote Code Execution POC CVE-2025-4008: MeteoBridge <= 6.1 - Remote Code Execution POC e-bridge-saveyzjfile-file-read: 泛微OA E-Bridge saveYZJFile 任意文件读取 POC weaver-ebridge-addTasteJsonp-sqli: Weaver e-Bridge addTasteJsonp SQL Injection POC weaver-ebridge-checkmobile-sqli: Weaver E-Bridge CheckMobile SQL Injection POC commax-credentials-disclosure: COMMAX Smart Home Ruvie CCTV Bridge DVR - RTSP Credentials Disclosure POC exposed-adb: Exposed Android Debug Bridge 泛微云桥 e-Bridge checkMobile接口存在SQL注入漏洞 Smartbedded MeteoBridge 存在远程命令执行漏洞(CVE-2025-4008)