Description
Jeewms是一款企业级的Web管理系统，提供多种功能模块以支持企业管理需求。JeeWMS的 /rest/../functionController.do 接口存在SQL注入漏洞，攻击者可以通过构造恶意的SQL语句，未经授权地访问数据库中的敏感信息，甚至可能完全控制数据库。
JeeWMS /rest/../functionController.do SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nosec.org/m/share/5901.html
https://www.tutusec.com/2273.html
https://gitee.com/erzhongxmu/JEEWMS/issues/IBFTVK
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/JEEWMS/JEEWMS%E7%B3%BB%E7%BB%9FcgReportController.do%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://mrxn.net/jswz/JeeWMS-cgAutoListController-sort-order-sqli.html