通达 OA submenu.php 未授权 SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/plbplbp/loudong001/blob/main/%E9%80%9A%E8%BE%BEOA/%E9%80%9A%E8%BE%BEOA%E5%89%8D%E5%8F%B0submenu.php%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E(CVE-2024-10600).md
• https://blog.csdn.net/user_hs/article/details/143954437
• https://avd.aliyun.com/detail?id=AVD-2024-10600
• https://blog.csdn.net/xc_214/article/details/143831655
• https://www.ddpoc.com/DVB-2021-2450.html
• https://cn-sec.com/archives/3430399.html
• https://shadu.baidu.com/article/1130

Related Vulnerabilities

• 通达OA pda/appcenter/submenu.php SQL注入漏洞
• PoC通达OA系统submenu.php存在SQL注入漏洞