References https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E9%80%9A%E8%BE%BEOA-v11.9-getdata-%E4%BB%BB%E6%84%8F%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md https://zhuanlan.zhihu.com/p/635533869 https://peiqi.wgpsec.org/wiki/oa/%E9%80%9A%E8%BE%BEOA/%E9%80%9A%E8%BE%BEOA%20v11.9%20getdata%20%E4%BB%BB%E6%84%8F%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.html https://stack.chaitin.com/poc/detail/987 https://cn-sec.com/archives/1791616.html https://blog.csdn.net/qq_44877321/article/details/129021869 http://www.duoweizhe.com/?post=16 https://cn-sec.com/archives/1483236.html https://www.duoweizhe.com/dwz_ldfx/16.html https://github.com/RCEraser/cve/blob/main/tongda.md
Related VulnerabilitiesJeecgBoot 积木报表 /jmreport/getDataSourceByPage 信息泄露漏洞易达科技ECMS /api/data/getData 信息泄露漏洞上海必智科技有限公司律师E通scheduleGetData.ashx存在SQL注入漏洞东胜物流软件 GetData 存在SQL注入漏洞预拌砼综合管理系统clsUser.GetData存在敏感信息泄露关于用友GRP-U8Cloud产品(XXX/getDataTypeList及XXX/getFAInfo)接口存在SQL注入漏洞的安全公告PoC东胜物流软件 /MvcShipping/MsAnnounce/GetData SQL 注入漏洞月子会所ERP管理云平台GetData1.ashx 存在SQL注入漏洞JeecgBoot积木报表getDataSourceByPage接口存在敏感信息泄露漏洞通达OA v11.7 delete_cascade.php SQL 注入漏洞通达OA /general/reportshop/utils/upload.php 文件上传漏洞(CNVD-2021-21890)