任我行 协同CRM普及版 /CommonDict/Edit 未授权 SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E4%BB%BB%E6%88%91%E8%A1%8C/%E4%BB%BB%E6%88%91%E8%A1%8C%E5%8D%8F%E5%90%8CCRM%E6%99%AE%E5%8F%8A%E7%89%88Edit%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://blog.csdn.net/weixin_44895005/article/details/134107671
• https://cn-sec.com/archives/3448404.html
• https://github.com/laoa1573/wy876/blob/main/wpoc/%E4%BB%BB%E6%88%91%E8%A1%8C/%E4%BB%BB%E6%88%91%E8%A1%8C%E5%8D%8F%E5%90%8CCRM%E6%99%AE%E5%8F%8A%E7%89%88Edit%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://axsec.blog.csdn.net/article/details/143858051
• https://github.com/adysec/POC/blob/main/wpoc/%E4%BB%BB%E6%88%91%E8%A1%8C/%E4%BB%BB%E6%88%91%E8%A1%8C%E5%8D%8F%E5%90%8CCRM%E6%99%AE%E5%8F%8A%E7%89%88Edit%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md

Related Vulnerabilities

• 任我行CRM存在sql注入
• 任我行CRM WeiXinApp_Message XXE漏洞
• 任我行协同CRM普及版 /crm/api/OpenApi/CommonDict/Edit SQL 注入漏洞
• PoC任我行CRM /CommonDict/Edit SQL注入漏洞
• 任我行CRM UploadFile 反序列化漏洞
• 任我行 CRM SmsDataList 接口存在SQL注入漏洞
• PoC任我行CRM picurl 参数存在任意文件读取漏洞
• PoC任我行crm PictureView1-任意文件下载