References https://www.twcert.org.tw/tw/cp-132-7623-5660d-1.html https://cnc.nptu.edu.tw/p/406-1007-165827,r1042.php?Lang=zh-tw https://www.dreamjtech.com/7258/ https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/information_security_information_sharing_1259/ https://tp2rc.tanet.edu.tw/node/1135 https://www.twcert.org.tw/tw/lp-132-1-6-60.html https://www.twcert.org.tw/tw/cp-132-10538-6a26d-1.html https://cve.imfht.com/detail/CVE-2023-48393 https://www.klepb.klcg.gov.tw/tw/klepb1/3522-280396.html https://rc065.ndhu.edu.tw/p/406-1102-215440,r3259.php
Related VulnerabilitiesPoCCVE-2026-8237: Concrete CMS <= 9.5.0 - Unauthenticated Conversation Message Disclosure (IDOR)Progress WhatsUp Gold /NmConsole/Platform/PerformanceMonitorErrors/HasErrors SQL 注入漏洞(CVE-2024-6670)Ivanti Sentry /mics/api/v2/sentry/mics-config/handleMessage 命令执行漏洞(CVE-2026-10520)智联云采 SRM2.0 /a/sys/sysMessage/statusList SQL 注入漏洞PoCretool-postmessage-xss: Retool Self-Hosted - postMessage XSS via Custom Component CollectionsPoCCVE-2025-53533: Pi-hole Reflected XSS in 404-Error PagePoC孚盟云CRM /m/Dingding/Ajax/AjaxFormDefault.ashx sendProductMessage SQL 注入漏洞PoC蓝凌-EIS智慧协同平台 /third/DingTalk/Pages/DingTalkMessage.aspx SQL 注入漏洞可豪软件信息技术南京有限公司可豪刀模ERP管理系统Message_Ajax.ashx pkVal参数存在SQL注入漏洞PoCCVE-2024-13222: WordPress User Messages <= 1.2.4 - Reflected XSSPoC孚盟云CRM /m/Dingding/Ajax/AjaxProviderList.ashx SendMessage SQL 注入漏洞PoCwp-wpstatistics-log: WordPress Plugin WP Statistics Error Log Disclosure