springblade-export-user-sqli: SpringBlade 框架后台 export-user 路径 SQL 注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/adysec/POC/blob/main/wpoc/SpringBlade/SpringBlade%20export-user%20SQL%20%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://www.lmboke.com/archives/springblade-export-user-sql-zhu-ru-lou-dong
• https://github.com/zeroChen00/exp-poc/blob/main/SpringBladeexport-user%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://www.ddpoc.com/DVB-2023-5780.html
• https://blog.csdn.net/yxr520yj/article/details/144958349
• https://sns.bladex.cn/q-12058.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/SpringBlade/SpringBlade%20export-user%20SQL%20%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://blog.csdn.net/jjjj1029056414/article/details/135727770
• https://cvedetails.com/cve/CVE-2022-27360/
• https://github.com/advisories/GHSA-62pr-54gv-vg5g

Related Vulnerabilities

• JeecgBoot 积木报表 /jmreport/auto/export/python/plugin 代码执行漏洞
• 仁和兴业（深圳）软件有限公司仁和云ERPbackupexportall 接口存在任意文件读取漏洞
• PoCgeoserver-jsonarraycontains-sqli: GeoServer jsonArrayContains CQL Filter - SQL Injection
• PoCCVE-2025-13528: Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export
• UniFi Access /api/ucore/backup/export 命令执行漏洞（CVE-2025-52665）
• PoCweaver-ecology9-doc-list-sqli: Weaver E-cology9 api/doc/out/more/list SQL Injection
• FOGProject /fog/management/export.php 信息泄露漏洞（CVE-2025-58443）
• PoC迈普无线网络管理系统 /form/exportConfigByHttp 信息泄露漏洞
• Evertz SDVN /v.1.5/php/features/feature-transfer-export.php 命令执行漏洞（CVE-2025-4009）
• SpringBlade /api/blade-log/api/list SQL 注入漏洞
• SpringBlade /api/blade-user/list SQL 注入漏洞
• PoCCVE-2025-11693: Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure
• PoCredis-exporter-metrics: Redis Exporter Metrics - Exposure