References https://mrxn.net/jswz/jhsoft-ArchivesShowAskAipAip-sqli.html https://mrxn.net/jswz/jhsoft-ArchivesShowAcceptAip-sqli.html https://mrxn.net/jswz/jhsoft-ArchivesInfoAsk-sqli.html https://mrxn.net/jswz/jhsoft-ArchivesInfoAcceptAip-sqli.html https://github.com/adysec/POC/blob/main/wpoc/%E9%87%91%E5%92%8COA/%E9%87%91%E5%92%8COA-C6%E5%8D%8F%E5%90%8C%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0DBModules.aspx%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md https://mrxn.net/tag/sql%E6%B3%A8%E5%85%A5/page/5
Related Vulnerabilities金和OA /c6/JHSoft.Web.CostControl/Decompose/AjaxForCenterBudgetDecompose.ashx SQL 注入漏洞金和OA /c6/JHSoft.Web.CostControl/BudgetExecution/VouchUpdate.aspx SQL 注入漏洞金和OA /C6/Jhsoft.Web.departments/GetTreeDate.aspx SQL 注入漏洞(CVE-2025-10090)北京金和网络股份有限公司金和OA系统存在SQL注入漏洞金和OA CostApplyHandler.ashx SQL注入漏洞金和OA AjaxForDepartmentCollect.ashx SQL注入漏洞金和OA EpassInitTakenSnInva.aspx XXE漏洞金和OA EpassValidate.aspx XXE漏洞金和OA EpassInitTakenSnExec.aspx XXE漏洞金和OA LstGroupXml.aspx XXE漏洞金和OA RegCodeInfo.aspx XXE漏洞金和OA CrmSystemSet XXE漏洞金和OA Departments-XmlHttp XXE漏洞