Description
金和OA-C6系统是一款由金和网络开发的办公自动化系统，旨在提升企业的办公效率和管理能力。系统的 /C6/JHSoft.Web.ask/SignUpload.ashx 接口存在SQL注入漏洞，攻击者可以通过该漏洞构造恶意SQL语句，未经授权访问数据库，获取敏感信息或对数据库进行破坏性操作。
金和OA-C6系统接口 /C6/Jhsoft.Web.ask/SignUpload.ashx SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Sec-Fork/POC-20241008/blob/main/%E9%87%91%E5%92%8COA/%E9%87%91%E5%92%8COA%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3SignUpload.ashx%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://blog.csdn.net/zixunchu001/article/details/142923571
https://cn-sec.com/archives/3213616.html
https://www.secevery.com/toAticleInfo?id=2b8d641cc54f81f47101175200bba10a