漏洞描述
熊海cms系统 content 模块sql注入处存在Sql注入，攻击者可通过该漏洞进入后台且获取数据库权限。
熊海cms content 模块sql注入
PoC代码
暂无相关漏洞推荐
- POC wp-ssl-insecure-content-fixer-fpd: WordPress Plugin SSL Insecure Content Fixer - Full Path Disclosure
- POC wp-table-of-contents-plus-fpd: WordPress Table of Contents Plus - Full Path Disclosure
- POC wp-ssl-insecure-content-fixer-fpd: WordPress Plugin SSL Insecure Content Fixer - Full Path Disclosure
- Ilevia EVE X1 Server /ajax/php/get_file_content.php 文件读取漏洞（CVE-2025-34518）
- WordPress Google for WooCommerce /wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/scripts/print_php_information.php 信息泄露漏洞（CVE-2024-10486）
- Trinity Audio /wp-content/plugins/trinity-audio/admin/inc/phpinfo.php 信息泄露漏洞（CVE-2025-9196）
- cellinxnvt-getfilecontent-cgi-fileread: Cellinx NVT - GetFileContent.cgi - FileRead
- h3c-mselfservice-dynamiccontent-properties-rce: H3C 用户自助服务平台 dynamiccontent.properties.xhtml RCE 漏洞
- 用友NC content存在XXE实体注入漏洞
- WordPress Automatic 插件 /wp-content/plugins/wp-automatic/inc/csv.php SQL 注入漏洞（CVE-2024-27956）
- ilevia EVE X1 Server get_file_content 接口存在任意文件读取漏洞
- WordPress TrueBooker WordPress插件 /wp-content/plugins/truebooker-appointment-booking/main/truebooker-service-price.php SQL 注入漏洞 （CVE-2024-6924）
- POC CNVD-2021-39067: H3C IMC dynamiccontent.properties.xhtm 远程命令执行