泛微E-cology9 存在SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/adysec/POC/blob/main/wpoc/%E6%B3%9B%E5%BE%AEOA/%E6%B3%9B%E5%BE%AEe-cology9%E6%8E%A5%E5%8F%A3WorkPlanService%E5%89%8D%E5%8F%B0SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E(XVE-2024-18112).md
• https://cloud.tencent.com/developer/article/2437209
• https://blog.csdn.net/weixin_53009585/article/details/140765849
• https://zhuanlan.zhihu.com/p/625931869
• https://www.cnblogs.com/pursue-security/p/17677330.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E6%B3%9B%E5%BE%AEOA/%E6%B3%9B%E5%BE%AEe-cology9%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3FileDownloadLocation%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://www.secrss.com/articles/52198
• https://cloud.tencent.com/developer/article/2443506
• https://it.shanghaitech.edu.cn/2023/0504/c8406a1077180/page.htm
• https://www.aqtd.com/nd.jsp?id=3407
• https://blog.csdn.net/qq_50854662/article/details/129661544
• https://github.com/izzz0/E-Cology9.0-SQL-POC

Related Vulnerabilities

• PoCweaver-ecology9-doc-list-sqli: Weaver E-cology9 api/doc/out/more/list SQL Injection
• 泛微E-Cology9 /services/WorkPlanService SQL 注入漏洞
• PoCweaver-ecology9-filedownloadlocation-sqli: Weaver E-cology 9.x FileDownloadLocation SQL Injection
• 泛微e-cology9 FormmodeFieldBrowserServlet SQL注入漏洞
• 泛微E-Cology9 ModeDateService 前台SQL注入漏洞
• 泛微E-Cology9 WorkPlanService 前台SQL注入漏洞
• 泛微 E-Cology9 getLabelByModule SQL注入漏洞
• 泛微E-Cology9低于10.56版本browser.jsp存在SQL注入漏洞
• 泛微e-cology9系统 WorkflowServiceXml SQL注入漏洞
• 泛微OA Ecology9 uploaderOperate.jsp 前台任意文件上传漏洞