References https://mrxn.net/jswz/trwfe-findSingConfigPage-sqli.html https://avd.aliyun.com/detail?id=AVD-2025-11317 https://cve.imfht.com/detail/CVE-2025-11317 https://poc.shuziguanxing.com/ https://vuldb.com/zh/vuln/327198
Related Vulnerabilities天锐绿盾审批系统 /trwfe/login.jsp/..;/thirdSystemConfig/findSingConfigPage.do SQL 注入漏洞天锐绿盾审批系统 /trwfe/login.jsp/.%2e/rest/ext/fileServer 信息泄露漏洞PoC天锐绿盾审批系统 /trwfe/login.jsp/../rest/ext/app/fileopen/record 代码执行漏洞天锐绿盾审批系统 /trwfe/login.jsp/.%2e/config/findAuditors.do 信息泄露漏洞天锐绿盾审批系统 /trwfe/login.jsp/.%2e/config/statWxApiRecord.do 信息泄露漏洞天锐绿盾审批系统 /trwfe/login.jsp/.%2e/config/getConfigValues.do 信息泄露漏洞天锐绿盾审批系统 /trwfe/login.jsp/.%2e/rest/ext/template 命令执行漏洞PoC天锐绿盾审批系统 /trwfe/login.jsp/.%2e/rest/ext/mergeQuery 命令执行漏洞天锐绿盾审批系统 tdSysFindDepartmentTree.do 信息泄露漏洞天锐绿盾审批系统 findOnlineUserForPage.do 信息泄露漏洞天锐绿盾审批系统 fileServer 信息泄露漏洞天锐绿盾审批系统 findAllDept.do 信息泄露漏洞