金山终端安全系统 /inter/ajax.php 远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/ax1sX/SecurityList/blob/main/Other_OA/%E9%87%91%E5%B1%B1%E7%BB%88%E7%AB%AF%E5%AE%89%E5%85%A8%E7%B3%BB%E7%BB%9F.md
• https://idocdown.com/app/articles/blogs/detail/11146
• https://x.threatbook.com/v5/article?threatInfoID=110014
• https://github.com/adysec/POC/blob/main/wpoc/%E9%87%91%E5%B1%B1/%E9%87%91%E5%B1%B1%E7%BB%88%E7%AB%AF%E5%AE%89%E5%85%A8%E7%B3%BB%E7%BB%9FV9.0%20SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://0x20h.com/p/6fcd.html
• https://github.com/tzwlhack/Vulnerability/blob/main/%E9%87%91%E5%B1%B1%E7%BB%88%E7%AB%AF%E5%AE%89%E5%85%A8%E7%B3%BB%E7%BB%9F%20V8-V9%E5%AD%98%E5%9C%A8%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://github.com/YinWC/2021hvv_vul/blob/master/0419/%E9%87%91%E5%B1%B1%20V8%20-V9%20%E7%BB%88%E7%AB%AF%E5%AE%89%E5%85%A8%E7%B3%BB%E7%BB%9F%E6%BC%8F%E6%B4%9E%E5%90%88%E9%9B%86.md
• https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/%E9%87%91%E5%B1%B1%20V8%20%E7%BB%88%E7%AB%AF%E5%AE%89%E5%85%A8%E7%B3%BB%E7%BB%9F%20pdf_maker.php%20%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md

Related Vulnerabilities

• 金山终端安全系统V9 ajax.php存在sql注入漏洞
• 金山终端安全系统 update_software_info_v2.php 文件 SQL 注入漏洞
• 金山终端安全系统V9 /inter/software_relation.php 任意文件上传漏洞
• 金山终端安全系统任意文件上传漏洞
• 金山终端安全系统V9sql注入漏洞
• 金山终端安全系统upload.php任意文件上传漏洞
• 金山终端安全系统V8 pdf_maker.php 命令执行漏洞
• 金山终端安全系统任意文件读取漏洞