明源地产ERP PhoneHandler 接口SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.sxcast.edu.cn/uploadfile/ueditor/file/202510/1761869308d5a4ea.pdf
• https://github.com/adysec/POC/blob/main/wpoc/%E6%98%8E%E6%BA%90%E4%BA%91/%E6%98%8E%E6%BA%90%E5%9C%B0%E4%BA%A7ERP%E6%8E%A5%E5%8F%A3Service.asmx%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://blog.csdn.net/o5p6q/article/details/153865479
• https://blog.csdn.net/stone/article/details/153804252
• https://www.ddpoc.com/DVB-2023-5280.html
• https://blog.csdn.net/lstm7chronicler/article/details/153432582
• https://www.cnblogs.com/0day-li/p/19007085

Related Vulnerabilities

• 明源地产ERP系统 /Hkbgl/PhoneWorkflow/Business/PhoneHandler.ashx SQL 注入漏洞
• 明源ERP存在SQL时间盲注