孚盟云 AjaxWriteMail.ashx 任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://mrxn.net/jswz/fumacrm-Dingding-Ajax-AjaxWriteMail-sqli.html
• https://cn-sec.com/archives/4587811.html
• https://ddpoc.com/DVB-2025-10245.html
• https://www.ddpoc.com/DVB-2025-10282.html
• https://security.zone.ci/secarticles/wx/492670.html
• https://mrxn.net/jswz/fumacrm-AjaxWriteMail-SQLi.html
• https://www.gm7.org/archives/37539
• https://zhuanlan.zhihu.com/p/1990942848875528611

Related Vulnerabilities

• 孚盟云CRM /m/Dingding/Ajax/AjaxProductList.ashx SQL 注入漏洞
• 孚盟云CRM Price_detail.aspx 存在SQL注入漏洞.docx
• 孚盟云CRM ProductGrid.aspx 存在SQL注入漏洞.docx
• 孚盟云 CRM /Ajax/upload.ashx DownLoadFieldAttch SQL 注入漏洞
• 孚盟云 CRM /PageStructure/Normal/TfrmProject.aspx 文件读取漏洞
• 孚盟云CRM BusiPriceOkPrint.aspx SQL注入漏洞
• 孚盟云CRM BusinessPriceReport.aspx SQL注入漏洞
• 孚盟云 CRM /m/Dingding/Product/BusinessPriceReport.aspx SQL 注入漏洞
• PoC孚盟云 CRM /m/Dingding/CustomizeReport/CustomizeReportSelectMould.aspx SQL 注入漏洞
• PoC孚盟云 CRM /m/Dingding/Card/ClientNameCard.aspx SQL 注入漏洞
• 孚盟云CRM /m/Dingding/Ajax/AjaxBusinessPrice.ashx GetBmailByFid SQL 注入漏洞
• PoC孚盟云 CRM /m/Dingding/Ajax/PriceList.ashx SQL 注入漏洞
• 孚盟云CRM AddInquiry.aspx SQL注入漏洞