用友CRM系统 reservationcomplete 未授权访问漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://blog.csdn.net/xc_214/article/details/142635695
• https://cn-sec.com/archives/2363384.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BCRM%E7%B3%BB%E7%BB%9Freservationcomplete.php%E5%AD%98%E5%9C%A8%E9%80%BB%E8%BE%91%E6%BC%8F%E6%B4%9E%E7%9B%B4%E6%8E%A5%E7%99%BB%E5%BD%95%E5%90%8E%E5%8F%B0.md
• https://ddpoc.com/DVB-2024-7939.html
• https://github.com/adysec/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BU8-CRM%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3reservationcomplete.php%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://blog.csdn.net/fushuang333/article/details/135464079
• https://www.cnblogs.com/fengzun/articles/18365219
• https://github.com/Nriver/wy876-POC
• https://cn-sec.com/archives/2374282.html

Related Vulnerabilities

• PoC用友U8 CRM /background/reservationcomplete.php 未授权访问漏洞
• 用友TurboCRM reservationcomplete SQL注入漏洞
• 用友U8 CRM reservationcomplete SQL注入漏洞
• 用友U8 CRM reservationcomplete 远程代码执行漏洞
• 用友CRM系统 downloadfile.php存在任意文件下载