Description
百易云资产管理运营系统存在SQL注入漏洞，攻击者可以通过该漏洞获取数据库权限，造成严重危害。
湖南众合百易信息技术有限公司-百易资管云系统-make.php SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.ddpoc.com/DVB-2025-9075.html
https://mrxn.net/jswz/baiyishequ-adminx-make-project_id-sqli.html
https://www.cnvd.org.cn/flaw/show/CNVD-2025-03911
https://avd.aliyun.com/detail?id=AVD-2025-1783129
https://github.com/adysec/POC/blob/main/wpoc/%E8%B5%84%E7%AE%A1%E4%BA%91/%E7%99%BE%E6%98%93%E4%BA%91%E8%B5%84%E4%BA%A7%E7%AE%A1%E7%90%86%E8%BF%90%E8%90%A5%E7%B3%BB%E7%BB%9Fufile.api.php%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://www.cnblogs.com/LeouMaster/p/18509643
https://cn-sec.com/archives/4227144.html
https://www.gm7.org/archives/100046