References https://mrxn.net/jswz/jhsoft-Departments-XmlHttp-xxe.html https://mrxn.net/jswz/jhsoft-CrmSystemSet-XMLHttp-xxe.html https://mrxn.net/jswz/jhsoft-H5SiteControl-xmlhttp-xxe.html https://ddpoc.com/DVB-2025-9890.html https://mrxn.net/jswz/jhsoft-dossier-XMLHttp-xxe.html
Related Vulnerabilities金和OA /c6/JHSoft.Web.CostControl/Decompose/AjaxForCenterBudgetDecompose.ashx SQL 注入漏洞金和OA /c6/JHSoft.Web.CostControl/BudgetExecution/VouchUpdate.aspx SQL 注入漏洞金和OA /C6/Jhsoft.Web.departments/GetTreeDate.aspx SQL 注入漏洞（CVE-2025-10090）PoC明源云-ERP /Report/RtsReport_XmlHttp.aspx SaveGeneralParam SQL 注入漏洞北京金和网络股份有限公司金和OA系统存在SQL注入漏洞金和OA CostApplyHandler.ashx SQL注入漏洞金和OA AjaxForDepartmentCollect.ashx SQL注入漏洞金和OA EpassInitTakenSnInva.aspx XXE漏洞金和OA EpassValidate.aspx XXE漏洞金和OA EpassInitTakenSnExec.aspx XXE漏洞金和OA LstGroupXml.aspx XXE漏洞金和OA RegCodeInfo.aspx XXE漏洞金和OA CrmSystemSet XXE漏洞