孚盟云 AjaxContractList.ashx SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://cn-sec.com/archives/4482280.html
• https://mrxn.net/jswz/fumacrm-Dingding-AjaxContractList-sqli.html
• https://cn-sec.com/archives/tag/%E5%AD%9A%E7%9B%9F%E4%BA%91
• https://mrxn.net/tag/%E6%BC%8F%E6%B4%9E/page/5
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/%E5%AD%9A%E7%9B%9F%E4%BA%91-AjaxMethod.ashx-SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://blog.csdn.net/qq_41904294/article/details/135708887
• https://mrxn.net/jswz/fumacrm-AjaxWriteMail-SQLi.html

Related Vulnerabilities

• 孚盟云CRM /m/Dingding/Ajax/AjaxProductList.ashx SQL 注入漏洞
• 孚盟云CRM Price_detail.aspx 存在SQL注入漏洞.docx
• 孚盟云CRM ProductGrid.aspx 存在SQL注入漏洞.docx
• 孚盟云 CRM /Ajax/upload.ashx DownLoadFieldAttch SQL 注入漏洞
• 孚盟云 CRM /PageStructure/Normal/TfrmProject.aspx 文件读取漏洞
• 孚盟云CRM BusiPriceOkPrint.aspx SQL注入漏洞
• 孚盟云CRM BusinessPriceReport.aspx SQL注入漏洞
• 孚盟云 CRM /m/Dingding/Product/BusinessPriceReport.aspx SQL 注入漏洞
• PoC孚盟云 CRM /m/Dingding/CustomizeReport/CustomizeReportSelectMould.aspx SQL 注入漏洞
• PoC孚盟云 CRM /m/Dingding/Card/ClientNameCard.aspx SQL 注入漏洞
• 孚盟云CRM /m/Dingding/Ajax/AjaxBusinessPrice.ashx GetBmailByFid SQL 注入漏洞
• PoC孚盟云 CRM /m/Dingding/Ajax/PriceList.ashx SQL 注入漏洞
• 孚盟云CRM AddInquiry.aspx SQL注入漏洞