Description
索贝融媒体是一款用于媒体内容编辑和管理的系统。该系统中的/sobey-mchEditor/mch/jztEditorScore/queryEditorScoreRank接口存在SQL注入漏洞，由于未对targetUserType参数进行充分过滤，攻击者可通过构造恶意SQL语句获取数据库敏感信息，可能导致数据库被完全控制。
索贝融媒体 /sobey-mchEditor/mch/jztEditorScore/queryEditorScoreRank SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://mrxn.net/jswz/sobey-jztEditorScore-queryEditorScoreRank-sqli.html
https://cn-sec.com/archives/4508693.html
https://github.com/eeeeeeeeee-code/POC
https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.10