厦门四信水利信息化平台name_query接口存在sql注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.ddpoc.com/DVB-2024-6466.html
• https://www.ddpoc.com/DVB-2026-11253.html
• https://www.gm7.org/archives/107523
• https://www.cnvd.org.cn/flaw/show/CNVD-2021-29119
• https://avd.aliyun.com/detail?id=AVD-2024-3688

Related Vulnerabilities

• 厦门四信水利信息化平台接口download存在任意文件读取
• 厦门四信水利信息化平台接口configList存在sql注入漏洞
• 厦门四信水利信息化平台 /stAlarmInfo/download.do 存在任意文件读取漏洞