Description
广联达OA(linkworks) EmailAccountOrgUserService usercode参数存在sql注入，可对系统执行sql操作，获取数据库中的敏感信息。
广联达OA /EmailAccountOrgUserService.asmx 路径 usercode 参数存在SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.csdn.net/qq_36618918/article/details/135915705
https://github.com/OracleNep/GlodonScan/blob/main/EXP.md
https://cn-sec.com/archives/3451974.html