明源云ERP /GetErpConfig.aspx 路径存在敏感信息泄露

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E6%98%8E%E6%BA%90%E4%BA%91/%E6%98%8E%E6%BA%90%E4%BA%91GetErpConfig.aspx%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E.md
• https://blog.csdn.net/user_hs/article/details/143135108
• https://www.ddpoc.com/DVB-2024-8341.html
• https://cn-sec.com/archives/3334066.html
• https://cn-sec.com/archives/3298130.html
• https://cn-sec.com/archives/3433762.html
• https://cn-sec.com/archives/3316704.html
• https://cn-sec.com/archives/3297903.html

Related Vulnerabilities

• PoC明源云-ERP /Report/RtsReport_XmlHttp.aspx SaveGeneralParam SQL 注入漏洞
• PoC明源云ERP系统 GetErpDept.ashx 接口存在SQL注入漏洞
• 明源云-ERP /Sldzkp/DZKP/MyPub_XMLHTTP.aspx SQL 注入漏洞
• PoC明源云-ERP RtsReport_XmlHttp.aspx SQL注入漏洞
• PoCmingyuanyun-erp-apiupdate-fileupload: 明源云 ERP系统 接口管家 ApiUpdate.ashx 任意文件上传漏洞
• PoC明源云-ERP MyPub_XMLHTTP.aspx SQL注入漏洞
• 明源云ERP系统存在SQL注入漏洞
• 明源云ERP /PubPlatform/Nav/Login/SSO/Login.aspx usercode 未授权访问漏洞
• 明源云-ERP sso/login.aspx 身份认证绕过漏洞
• 明源云erp存在认证绕过漏洞
• 明源云ERP GetMyKeywordListForDesign SQL注入漏洞