律师e通 /caseprocess/jsonData/interfaceData.ashx SQL 注入漏洞

2026-04-30 律师e通 PoC Public

Description

律师e通是一款面向律师行业的案件管理系统，提供案件管理、客户管理、日程管理等核心功能。其 /caseprocess/jsonData/interfaceData.ashx 接口存在SQL注入漏洞，攻击者可通过 keyID 参数构造恶意SQL语句，获取数据库敏感信息。

PoC

GET /caseprocess/jsonData/interfaceData.ashx?param=loadCaseInfo&keyID=1'

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://gobysec.net/updates# LawyerE /caseprocess/jsonData/interfaceData.ashx SQL Injection Vulnerability

References

Related Vulnerabilities