孚盟云 showFocused SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://mrxn.net/jswz/fumacrm-Dingding-Ajax-AjaxCustomerList-sqli.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E5%AD%9A%E7%9B%9F%E4%BA%91/%E5%AD%9A%E7%9B%9F%E4%BA%91%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3ajaxsenddingdingmessage%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://www.cnvd.org.cn/flaw/show/CNVD-2021-25336
• https://blog.csdn.net/qq_41904294/article/details/135708887
• https://stack.chaitin.com/vuldb/detail/5d597ea5-4955-4559-ad7d-6849aac9d112
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/%E5%AD%9A%E7%9B%9F%E4%BA%91-AjaxMethod.ashx-SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://avd.aliyun.com/detail?id=AVD-2021-900191

Related Vulnerabilities

• 孚盟云CRM /m/Dingding/Ajax/AjaxProductList.ashx SQL 注入漏洞
• 孚盟云CRM Price_detail.aspx 存在SQL注入漏洞.docx
• 孚盟云CRM ProductGrid.aspx 存在SQL注入漏洞.docx
• 孚盟云 CRM /Ajax/upload.ashx DownLoadFieldAttch SQL 注入漏洞
• 孚盟云 CRM /PageStructure/Normal/TfrmProject.aspx 文件读取漏洞
• 孚盟云CRM BusiPriceOkPrint.aspx SQL注入漏洞
• 孚盟云CRM BusinessPriceReport.aspx SQL注入漏洞
• 孚盟云 CRM /m/Dingding/Product/BusinessPriceReport.aspx SQL 注入漏洞
• PoC孚盟云 CRM /m/Dingding/CustomizeReport/CustomizeReportSelectMould.aspx SQL 注入漏洞
• PoC孚盟云 CRM /m/Dingding/Card/ClientNameCard.aspx SQL 注入漏洞
• 孚盟云CRM /m/Dingding/Ajax/AjaxBusinessPrice.ashx GetBmailByFid SQL 注入漏洞
• PoC孚盟云 CRM /m/Dingding/Ajax/PriceList.ashx SQL 注入漏洞
• 孚盟云CRM AddInquiry.aspx SQL注入漏洞