漏洞描述
Landray EIS是中国蓝凌（Landray）公司的一个全面的智能协作平台。 Landray EIS 2001版本至2006版本存在安全漏洞，该漏洞源于容易受到SQL注入攻击。
Landray EIS 安全漏洞
PoC代码
暂无相关漏洞推荐
- POC CNVD-2021-28277: Landray OA Custom JSP file rread
- POC landray-ekp-sysFormMainDataInsystemWebservice-fileread: Landray EKP sysFormMainDataInsystemWebservice File Read
- POC landray-oa-datajson-rce: Landray OA Datajson RCE
- POC landray-oa-kmImeetingBookWebService-fileread: Landray OA kmImeetingBookWebService File Read
- POC landray-oa-kmImeetingResWebService-fileread: Landray OA kmImeetingResWebService File Read
- POC landray-oa-loginWebserviceService-fileread: Landray OA loginWebserviceService File Read
- POC landray-oa-sysNotifyTodoWebService-fileread: Landray OA sysNotifyTodoWebService File Read
- POC landray-oa-sysNotifyTodoWebServiceEkpj-fileread: Landray OA sysNotifyTodoWebServiceEkpj File Read
- POC landray-oa-syssearchmain-rce: Landray sysSearchMain.do RCE
- POC landray-oa-sysSynchroGetOrgWebService-fileread: Landray OA sysSynchroGetOrgWebService File Read
- POC landray-oa-sysTagWebService-fileread: Landray OA sysTagWebService File Read
- POC landray-oa-thirdImSyncForKKWebService-fileread: Landray OA thirdImSyncForKKWebService File Read
- POC landray-oa-treexml-rce: Landray OA treexml.tmpl script 远程代码执行漏洞