昂捷ERP cwsqry.asmx存在SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://mrxn.net/jswz/enjoyrmis-ws-reporttool-cwsqry-stablename-sqli.html
• https://ddpoc.com/DVB-2025-9123.html
• https://github.com/0day404/HV-2024-POC/blob/main/%E6%98%82%E6%8D%B7ERP%20WebService%E6%8E%A5%E5%8F%A3%20SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E(QVD-2023-45071).md
• https://mrxn.net/record/202502
• https://www.ddpoc.com/DVB-2023-5544.html
• https://mrxn.net/jswz/enjoyrmis-ws-pos-cwsoa-sId-sqli.html
• https://cn-sec.com/archives/2235279.html
• https://mrxn.net/jswz/enjoyrmis-ws-approve-cwsapprove-sqli.html

Related Vulnerabilities

• 昂捷ERP /EnjoyRMIS_WS/WS/ReportTool/cwsqry.asmx GetChildGroupSql1 SQL 注入漏洞
• 昂捷ERP /EnjoyRMIS_WS/ 目录遍历漏洞
• 昂捷ERP cwsgdsPrice.asmx存在SQL注入漏洞
• 昂捷-ERP /enjoyRMIS_WS/WS/BaseInfo/cwssurvey.asmx 接口 SQL 注入漏洞
• 昂捷 ERP /EnjoyRMIS_WS/WS/OA/CWSOffice.asmx SQL 注入漏洞
• 昂捷ERP /EnjoyRMIS_WS/WS/ReportTool/cwsqry.asmx GetDictionary SQL 注入漏洞
• 昂捷ERP /EnjoyRMIS_WS/WS/Approve/cwsapprove.asmx GetApproveDataXML SQL 注入漏洞
• 昂捷ERP cwsapprove.asmx存在SQL注入漏洞
• 昂捷ERP接口存在SQL注入