References https://ddpoc.com/DVB-2025-10414.html https://zhuanlan.zhihu.com/p/1990942848875528611 https://www.gm7.org/archives/32778 https://bdziyi.com/60737/ https://www.ddpoc.com/DVB-2024-6622.html https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E5%AE%8F%E6%99%AFOA/%E5%AE%8F%E6%99%AFeHR%E4%BA%BA%E5%8A%9B%E8%B5%84%E6%BA%90%E7%AE%A1%E7%90%86%E8%BD%AF%E4%BB%B6showmediainfo%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md https://www.ddpoc.com/DVB-2024-7178.html https://blog.csdn.net/qq_40550150/article/details/137384668 https://www.cnvd.org.cn/flaw/show/CNVD-2025-08629
Related Vulnerabilities宏景eHR /services/SynToADService XML 外部实体注入漏洞宏景 eHR /services/HrChangeInfoService XML 外部实体注入漏洞PoC宏景eHR /performance/objectiveManage/designateTask.do SQL 注入漏洞宏景 ehr /services/HrpService updateHolidays XML 外部实体注入漏洞宏景 ehr /services/HrpService Huayu_peWageRecv XML 外部实体注入漏洞宏景 ehr /services/HrpService getHolidayMsg XML 外部实体注入漏洞宏景 ehr /services/HrpService impInfoByNotice impInfoByNotice XML 外部实体注入漏洞宏景eHR /templates/attestation/../../jp_contest/personinfo/ShowStuffInfo SQL 注入漏洞宏景HCM人力资源信息管理系统 ShowStuffInfo 存在SQL注入漏洞宏景eHR designateTask.do SQL注入漏洞PoCCNVD-2023-08743: 宏景 eHR SQL 注入漏洞宏景eHR /templates/attestation/../../servlet/DisplayOleContent 文件读取漏洞