References https://www.ddpoc.com/DVB-2025-10325.html https://cn-sec.com/archives/4743564.html https://cn-sec.com/archives/tag/getprojectbasedocdata https://www.ddpoc.com/DVB-2025-10326.html https://www.gm7.org/archives/32778
Related Vulnerabilities易达科技ECMS /api/data/getData 信息泄露漏洞易达科技ECMS /app/uploadFile 文件上传漏洞易达科技ECMS存在弱口令易达科技ECMS存在未授权访问漏洞PoCCVE-2024-57241: DedeCMS - Open Redirect via download.phpjeeCMS 3.X 后台默认口令PoC（CVE-2025-15004）DedeCMS至5.7.118版本freelist_main.php文件orderby参数SQL注入漏洞易达科技-ECMS getlistProjAuditDataQGC.do SQL注入漏洞PoC易达科技-ECMS getlistProjAuditDataQGC 存在SQL注入漏洞PoC易达科技-ECMS getProjectBaseDocData 存在SQL注入漏洞PoCCVE-2024-28623: RiteCMS 3.0.0 - Cross-site ScriptingPoCCVE-2017-11586: FineCMS <5.0.9 - Open RedirectPoCCVE-2017-11629: FineCMS <=5.0.10 - Cross-Site Scripting