Description 易宝OA StockTake/IsPartNumber接口处存在SQL注入漏洞,未经身份认证的攻击者可以通过此漏洞获取数据库敏感信息,用户名密码等凭据,进一步利用可获取服务器权限
References https://zone.ci/vulns/msec/307867.html https://www.gm7.org/archives/33400 https://zone.ci/secarticles/wx/488821.html https://www.ddpoc.com/DVB-2026-10600.html http://download.csdn.net/blog/column/10118303/134710315