References https://www.twcert.org.tw/tw/cp-132-6355-3bdab-1.html https://www.twcert.org.tw/newepaper/cp-151-6355-3bdab-3.html https://cve.imfht.com/intel/509344 https://www.twcert.org.tw/tw/lp-132-1-25-20.html https://www.twcert.org.tw/tw/lp-132-1-9-60.html
Related VulnerabilitiesPoCCVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code ExecutionWordPress WebStack主题 /wp-admin/admin-ajax.php 文件上传漏洞（CVE-2026-1555）CentreStack 本地文件包含漏洞(CVE-2025-11371)全程云 /OA/api/2.0/HR/EntryApply/GetBaseData SQL 注入漏洞Apache CloudStack /client/api/ 默认口令漏洞Gladinet CentreStack & Triofox /storage/filesvr.dn 文件读取漏洞（CVE-2025-14611）ERPNext /api/method/erpnext.stock.doctype.material_request.material_request.get_material_requests_based_on_supplier SQL 注入漏洞（CVE-2025-52039）PoCCVE-2025-62613: VDO.Ninja - DOM-Based Cross-Site ScriptingPoCservicestack-requestlogs: ServiceStack Request Logs - Unauthenticated AccessPoCCVE-2025-14611: Gladinet CentreStack & Triofox - Hardcoded Credentials（CVE-2025-14611）Gladinet CentreStack和Triofox AES加密硬编码漏洞导致任意文件包含及安全降级易达科技-ECMS getProjectBaseDocData SQL注入漏洞PoC易达科技-ECMS getProjectBaseDocData 存在SQL注入漏洞