References https://cn-sec.com/archives/4743564.html https://cn-sec.com/archives/tag/getlistprojauditdataqgc-do https://www.gm7.org/archives/32778
Related Vulnerabilities易达科技ECMS /api/data/getData 信息泄露漏洞易达科技ECMS /app/uploadFile 文件上传漏洞易达科技ECMS存在弱口令易达科技ECMS存在未授权访问漏洞PoCCVE-2024-57241: DedeCMS - Open Redirect via download.phpjeeCMS 3.X 后台默认口令PoC(CVE-2025-15004)DedeCMS至5.7.118版本freelist_main.php文件orderby参数SQL注入漏洞易达科技-ECMS getProjectBaseDocData SQL注入漏洞易达科技-ECMS /procedure/getlistProjAuditDataQGC.do SQL 注入漏洞PoC易达科技-ECMS getlistProjAuditDataQGC 存在SQL注入漏洞PoC易达科技-ECMS getProjectBaseDocData 存在SQL注入漏洞PoCCVE-2024-28623: RiteCMS 3.0.0 - Cross-site Scripting