泛微E-Message 管理界面存在任意文件读取漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• PoCCVE-2026-8237: Concrete CMS <= 9.5.0 - Unauthenticated Conversation Message Disclosure (IDOR)
• Ivanti Sentry /mics/api/v2/sentry/mics-config/handleMessage 命令执行漏洞（CVE-2026-10520）
• 智联云采 SRM2.0 /a/sys/sysMessage/statusList SQL 注入漏洞
• PoCretool-postmessage-xss: Retool Self-Hosted - postMessage XSS via Custom Component Collections
• PoC孚盟云CRM /m/Dingding/Ajax/AjaxFormDefault.ashx sendProductMessage SQL 注入漏洞
• PoC蓝凌-EIS智慧协同平台 /third/DingTalk/Pages/DingTalkMessage.aspx SQL 注入漏洞
• 可豪软件信息技术南京有限公司可豪刀模ERP管理系统Message_Ajax.ashx pkVal参数存在SQL注入漏洞
• PoCCVE-2024-13222: WordPress User Messages <= 1.2.4 - Reflected XSS
• PoC孚盟云CRM /m/Dingding/Ajax/AjaxProviderList.ashx SendMessage SQL 注入漏洞
• 云视频管理系统selectMessage存在SQL注入漏洞
• Frappe /api/method/frappe.automation.doctype.auto_repeat.auto_repeat.generate_message_preview SQL 注入漏洞（CVE-2025-68929）