畅捷通信息技术股份有限公司畅捷通存在SQL注入

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://blog.csdn.net/qq_40550150/article/details/137014001
• https://github.com/Sweelg/QVD-2023-13612_TPlus-SQLvuln
• https://avd.aliyun.com/detail?id=AVD-2024-1729936
• https://www.cnblogs.com/LeouMaster/p/18190505
• https://zhuanlan.zhihu.com/p/636981077
• https://www.secrss.com/articles/55577
• https://blog.nsfocus.net/t-sql/
• https://blog.csdn.net/nglj9527/article/details/139303434
• https://www.cnblogs.com/pursue-security/p/17775830.html
• https://cloud.tencent.com/developer/article/2396485
• https://www.cnblogs.com/pursue-security/p/17684691.html
• https://www.cnvd.org.cn/flaw/show/CNVD-2023-62863

Related Vulnerabilities

• 畅捷通T+系统 AccountExtendRuleController接口处存在反序列化漏洞
• PoC畅捷通T+ /tplus/GLSyncService.asmx/SimulationLoginNew SQL 注入漏洞
• 畅捷通信息技术股份有限公司畅捷通T+存在SQL注入漏洞
• 畅捷通T+ DownLoadBlockFile 存在任意文件读取漏洞
• PoC畅捷通T+ /tplus/FormReport/FormReportOperateAction.aspx 文件读取漏洞
• 畅捷通T+ /tplus/UFAQD/KeyRegister.aspx SQL 注入漏洞
• 畅捷通T+ /tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanySettingController.Ufida.T.SM.UIP.ashx SQL 注入漏洞
• 畅捷通-TPlus /tplus/ajaxpro/ASP_sm_setupaccount_versionupdate_selectbackupfileonserver_aspx App_Web_selectbackupfileonserver.aspx.1cbd2a00.ashx 目录遍历漏洞
• 用友 畅捷通T+ InitContext 登录绕过漏洞
• 用友 畅捷通T+ SaveFileInfoToFile 任意文件上传漏洞
• 用友 畅捷通T+ GetRecordAll 敏感信息泄露漏洞
• 畅捷通T+ ME_MemberIntegral_IntegralAdjust 存在反序列化漏洞