金和OA C6系统 AssTypeSendXML.aspx SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://mrxn.net/jswz/jhsoft-AssTypeSendXML-xxe-sqli.html
• https://cn-sec.com/archives/4743576.html
• https://cn-sec.com/archives/tag/asstypesendxml-aspx
• https://poc.shuziguanxing.com/
• https://mrxn.net/jswz/jhsoft-AssTypeSendXML-xxe-sqli.html

Related Vulnerabilities

• 金和OA /c6/Jhsoft.Web.Asset/AssTypeSendXML.aspx 存在SQL注入漏洞
• 金和OA AssTypeSendXML.aspx XXE漏洞
• 金和OA /c6/Jhsoft.Web.Asset/AssTypeSendXML.aspx 存在XML外部实体注入漏洞