Description
Bylancer Quicklancer 2.4 中发现一个漏洞，并被评为严重级别。该漏洞影响组件 GET 参数处理程序的文件/列表的一些未知处理。对参数range2 的操作会导致 SQL 注入，攻击者可利用该漏洞获取数据库权限
Bylancer Quicklancer GET 参数列表 SQL 注入漏洞(CVE-2024-7188)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-7188
https://avd.aliyun.com/detail?id=AVD-2024-7188
https://github.com/bigb0x/CVEs/blob/main/quicklancer-2-4.md
https://cve.imfht.com/detail/CVE-2024-7188
https://www.ddpoc.com/DVB-2025-9081.html
https://pentest-tools.com/vulnerabilities-exploits/bylancer-quicklancer-24-g-sql-injection_22989
https://s4e.io/tools/bylancer-quicklancer-sql-injection-cve-2024-7188
https://access.redhat.com/security/cve/cve-2024-7188
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2024-7188