红帆ioffice HbcaUserLogin.aspx SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://mrxn.net/jswz/ioffice-Identity-HbcaUserLogin-sqli.html
• https://mrxn.net/tag/sql%E6%B3%A8%E5%85%A5/page/7
• https://mrxn.net/tag/%E6%BC%8F%E6%B4%9E/page/13
• https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.10
• https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11_v2

Related Vulnerabilities

• 红帆OA /ioffice/prg/Mobile/Base/MobileBind.aspx SQL 注入漏洞
• 红帆 IOffice MobileBind.aspx SQL注入漏洞
• 红帆ioffice mrClearPwd.aspx SQL注入漏洞
• 红帆ioffice PgcaUserLogin.aspx SQL注入漏洞
• 红帆 iOffice /ioffice/Identity/HbcaUserLogin.aspx 存在SQL注入漏洞
• PoChongfan-iodesktopdata-sqli: 红帆iOffice ioDesktopData.asmx接口SQL注入
• PoChongfan-ioffice-iofiledown-fileread: 红帆 iOffice ioFileDown 任意文件读取漏洞
• PoCioffice-oa-iofileexport-read-file: 红帆OA ioFileExport.aspx 任意文件读取漏洞
• PoCioffice-oa-udfmr-asmx-sql-inject: 红帆OA udfmr.asmx SQL注入漏洞
• PoChongfan-ioffice-lfi: Hongfan OA ioFileExport.aspx - Arbitrary File Read
• PoChongfan-ioffice-rce: Hongfan OA ioAssistance.asmx - Remote Code Execution