漏洞描述
蓝凌oa办公系统是用于即时办公通讯的oa办公工具。Landray-蓝凌-智慧协同平台存在-SQL注入漏洞，攻击者可以通过该漏洞获取大量数据库敏感信息。
Landray-蓝凌-智慧协同平台存在-SQL注入漏洞
PoC代码
暂无相关漏洞推荐
- POC CNVD-2021-28277: Landray OA Custom JSP file rread
- POC landray-ekp-sysFormMainDataInsystemWebservice-fileread: Landray EKP sysFormMainDataInsystemWebservice File Read
- POC landray-oa-datajson-rce: Landray OA Datajson RCE
- POC landray-oa-kmImeetingBookWebService-fileread: Landray OA kmImeetingBookWebService File Read
- POC landray-oa-kmImeetingResWebService-fileread: Landray OA kmImeetingResWebService File Read
- POC landray-oa-loginWebserviceService-fileread: Landray OA loginWebserviceService File Read
- POC landray-oa-sysNotifyTodoWebService-fileread: Landray OA sysNotifyTodoWebService File Read
- POC landray-oa-sysNotifyTodoWebServiceEkpj-fileread: Landray OA sysNotifyTodoWebServiceEkpj File Read
- POC landray-oa-syssearchmain-rce: Landray sysSearchMain.do RCE
- POC landray-oa-sysSynchroGetOrgWebService-fileread: Landray OA sysSynchroGetOrgWebService File Read
- POC landray-oa-sysTagWebService-fileread: Landray OA sysTagWebService File Read
- POC landray-oa-thirdImSyncForKKWebService-fileread: Landray OA thirdImSyncForKKWebService File Read
- POC landray-oa-treexml-rce: Landray OA treexml.tmpl script 远程代码执行漏洞