References https://github.com/ibaiw/2023Hvv/blob/main/%E4%B8%AD%E8%BF%9C%E9%BA%92%E9%BA%9F%E5%A0%A1%E5%9E%92%E6%9C%BASQL%E6%B3%A8%E5%85%A5.md https://qvq.im/post/tosec-audit-sqli-to-webshell/ https://avd.aliyun.com/detail?id=AVD-2023-26784 https://ddpoc.com/DVB-2024-7635.html https://cn-sec.com/archives/2588347.html https://avd.aliyun.com/detail?id=AVD-2024-1713131 https://cloud.tencent.com/developer/article/2326775 https://www.tosec.com.cn/
Related VulnerabilitiesPoCsecvpn-admin-commonuser-sqli: 中远麒麟堡垒机 SQL 注入中远麒麟堡垒机后台存在sql注入漏洞中远麒麟堡垒机/admin.php任意命令执行漏洞中远麒麟堡垒机后台存在远程命令执行漏洞中远麒麟堡垒机 username SQL注入漏洞中远麒麟堡垒机tokens SQL注入中远麒麟堡垒机 admin.php SQL注入Vanderbilt IP-Camera /chklogin.cgi 路径存在敏感信息泄露中远麒麟堡垒机 未授权漏洞中远麒麟堡垒机远程代码执行中远麒麟堡垒机存在账号密码泄露漏洞