Description
泛微ecology9.0 存在SQL注入漏洞，可通过SQL注入可获取敏感信息甚至获取到服务器权限。
泛微ecology 9.0 LoginSSO.%2520jsp SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/pursue-security/p/17677275.html
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E6%B3%9B%E5%BE%AEOA-E-Cology-LoginSSO.jsp-SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E-CNVD-2021-33202.md
https://www.ctfiot.com/83778.html
https://www.hackjie.com/docs/3336.html
https://peiqi.wgpsec.org/wiki/oa/%E6%B3%9B%E5%BE%AEOA/%E6%B3%9B%E5%BE%AEOA%20E-Cology%20LoginSSO.jsp%20SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%20CNVD-2021-33202.html
https://cn-sec.com/archives/2308218.html