任我行CRM存在sql注入

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E4%BB%BB%E6%88%91%E8%A1%8C/%E4%BB%BB%E6%88%91%E8%A1%8C%E5%8D%8F%E5%90%8CCRM%E6%99%AE%E5%8F%8A%E7%89%88Edit%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E4%BB%BB%E6%88%91%E8%A1%8C/%E4%BB%BB%E6%88%91%E8%A1%8C%E5%8D%8F%E5%90%8CCRM%E6%99%AE%E5%8F%8A%E7%89%88viewaccountBase%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://www.mhtsec.com/323/
• https://www.wecrm.com/News/news_products/20230913512.html
• https://www.ddpoc.com/DVB-2023-4919.html
• https://cn-sec.com/archives/2357829.html
• https://wooyun.laolisafe.com/bug_detail.php?wybug_id=wooyun-2013-021665
• https://cn-sec.com/archives/3448404.html
• https://peiqi.wgpsec.org/wiki/webapp/%E4%BB%BB%E6%88%91%E8%A1%8C/%E4%BB%BB%E6%88%91%E8%A1%8C%20CRM%20SmsDataList%20SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.html
• https://blog.csdn.net/weixin_44895005/article/details/134107671

Related Vulnerabilities

• 任我行CRM WeiXinApp_Message XXE漏洞
• 任我行 协同CRM普及版 /CommonDict/Edit 未授权 SQL注入漏洞
• PoC任我行CRM /CommonDict/Edit SQL注入漏洞
• 任我行CRM UploadFile 反序列化漏洞
• 任我行 CRM SmsDataList 接口存在SQL注入漏洞
• PoC任我行CRM picurl 参数存在任意文件读取漏洞
• PoC任我行crm PictureView1-任意文件下载