References https://www.ddpoc.com/DVB-2025-9213.html https://cn-sec.com/archives/4129962.html https://zhuanlan.zhihu.com/p/1932214870562047555 https://www.gm7.org/archives/32778 https://wiki.shikangsi.com/profile/1247/
Related Vulnerabilities广联达OA /Mail/Services/EmailAccountOrgUserService.asmx/GetUserEmailByOrgEmails XML 外部实体注入漏洞PoCCVE-2021-24916: WordPress Qubely < 1.8.6 - Unauthenticated Email SendingPoCCVE-2025-13920: WP Directory Kit < 1.5.0 - Unauthenticated Email ExposurePoCCVE-2026-2025: Mail Mint < 1.19.5 - Unauthenticated Email DisclosurePoCCVE-2022-0439: Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL InjectionPoCCVE-2026-0829: Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email SendingPoCCVE-2024-13098: WordPress Email Newsletter - Reflected XSS孚盟云CRM /m/Dingding/Ajax/AjaxBusinessPrice.ashx GetContactEmail SQL 注入漏洞孚盟云CRM /m/Dingding/Ajax/AjaxBusinessPrice.ashx GetContactEmailByFid SQL 注入漏洞PoCCVE-2025-11833: Post SMTP <= 3.6.0 - Email Log Disclosure孚盟云 AjaxWriteMail.ashx SQL注入漏洞