泛微ecology10 存在sql注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/ibaiw/2024Hvv/blob/main/%E6%B3%9B%E5%BE%AEOA%20E-Cology%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://zhi.oscs1024.com/43530.html
• https://wxb.fzu.edu.cn/info/1015/1885.htm
• https://itsc.nju.edu.cn/aa/80/c41947a633472/page.htm
• https://www.secrss.com/articles/54070
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E6%B3%9B%E5%BE%AEOA/%E6%B3%9B%E5%BE%AEOA-E-Cology-Getdata.jsp%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://stack.chaitin.com/vuldb/detail/45c33cdd-ced0-44b5-b067-1ae9e8dcee0f
• https://blog.csdn.net/weixin_43981050/article/details/131679936
• https://www.weaver.com.cn/cs/security/edm20240710_kdielfrovkewpiiuyrtewtw.html
• https://zhi.oscs1024.com/43536.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E6%B3%9B%E5%BE%AEOA/%E6%B3%9B%E5%BE%AEOA-E-Cology%E6%8E%A5%E5%8F%A3WorkflowServiceXml%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://www.secevery.com/toBugInfo?id=1660854630030176258

Related Vulnerabilities

• 泛微-Ecology10 getFieldValueFun SQL注入漏洞
• 泛微 E-cology10 xmReport 代码执行漏洞