Description JieLink+智能终端操作平台是深圳市捷顺科技实业股份有限公司旗下一款终端管理平台。JieLink+智能终端操作平台存在敏感信息泄露漏洞,攻击者可以通过该漏洞获取系统铭感信息。
References https://github.com/adysec/POC/blob/main/wpoc/JieLink/JieLink+%E6%99%BA%E8%83%BD%E7%BB%88%E7%AB%AF%E6%93%8D%E4%BD%9C%E5%B9%B3%E5%8F%B0%E5%A4%9A%E4%B8%AA%E6%8E%A5%E5%8F%A3%E5%A4%84%E5%AD%98%E5%9C%A8%E6%95%8F%E6%84%9F%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E.md https://www.ddpoc.com/DVB-2025-8874.html https://cn-sec.com/archives/4168488.html https://wiki.shikangsi.com/post/share/fd390bd7-2d60-4ffb-87da-f72cc900f61c https://ddpoc.com/DVB-2025-8873.html https://avd.aliyun.com/detail?id=AVD-2024-7919 https://cn-sec.com/archives/2723909.html https://wiki.tntsec.com/docs/bug/webapp/JieLink/JieLink_%E6%99%BA%E8%83%BD%E7%BB%88%E7%AB%AF%E6%93%8D%E4%BD%9C%E5%B9%B3%E5%8F%B0%E5%AD%98%E5%9C%A8%E5%90%8E%E5%8F%B0GetVoucherDelaySummary%20SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.html
Related VulnerabilitiesPoCdongshengwuliu-getdatalistca-sqli: 东胜物流软件GetDataListCA接口存在SQL注⼊漏洞东胜物流软件 /Account/Chfee_hexiao/GetDataList SQL 注入漏洞JieLink+ 智能终端操作平台 /project/IPPool/DeleteIpPool SQL 注入漏洞JieLink+智能终端操作平台 DeleteIpPool SQL注入JieLink+智能终端操作平台 DeleteIpPool SQL注入漏洞JieLink+智能终端操作平台 GetFkjEventInfoList SQL注入漏洞JieLink+智能终端操作平台存在敏感信息泄露漏洞东胜物流软件 /MvcShipping/MsCwGenlegAccitems/GetDataListCA SQL 注入漏洞PoC东胜物流软件 GetDataListCA SQL注入漏洞东胜物流软件 GetDataListCA SQL 注入漏洞