用友-移动系统管理 backup SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://blog.csdn.net/weixin_58134620/article/details/137688011
• https://blog.csdn.net/weixin_43567873/article/details/137568839
• https://www.ddpoc.com/DVB-2023-5194.html
• https://cn-sec.com/archives/2087949.html
• https://github.com/eeeeeeeeee-code/POC
• https://www.cnblogs.com/0day-li/p/19007070
• https://doc.mbalib.com/view/69e17b2551aa74bd58dff88b966db098.html

Related Vulnerabilities

• 仁和兴业（深圳）软件有限公司仁和云ERPbackupexportall 接口存在任意文件读取漏洞
• PoCCVE-2026-12898: All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write
• PoCCVE-2024-56064: WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload to RCE
• UniFi Access /api/ucore/backup/export 命令执行漏洞（CVE-2025-52665）
• 指挥调度管理平台 /app/dbtool/db_backup_download.php 信息泄露漏洞
• PoCCVE-2023-6750: WordPress WP Clone <= 2.4.2 - Database Backup Exposure
• PoCCVE-2023-7165: JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing
• D-Link DNS-ShareCenter /cgi-bin/remote_backup.cgi 命令执行漏洞（CVE-2026-4196）
• PoCCVE-2026-1357: WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload
• Nginx UI /api/backup 未授权访问漏洞（CVE-2026-27944）
• PoCsweetrice-backup-disclosure: SweetRice CMS 1.5.1 - Backup Disclosure
• PoCovhcloud-backup-config: OVHcloud Backup Configuration - Exposure
• PoCCVE-2025-69200: phpMyFAQ - Configuration Backup Disclosure