Description
汉王e脸通综合管理平台存在SQL注入漏洞，攻击者可以通过在/manage/intercom/..;/..;/manage/meeting/meetingFileManage.do接口的参数中注入恶意SQL语句，未经授权地访问或修改数据库中的敏感信息，可能导致数据泄露、篡改或系统崩溃。
汉王e脸通综合管理平台 /manage/intercom/..;/..;/manage/meeting/meetingFileManage.do SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.csdn.net/murphysec/article/details/149058449
https://zhi.oscs1024.com/43482.html
https://mrxn.net/jswz/hanvon-efacego-meetingFileManage-sqli.html
https://cn-sec.com/archives/4695307.html
https://nosec.org/m/share/5890.html
https://www.wlaqsys.com/archives/11708