Description
宏景存在SQL注入漏洞，此漏洞是由于 ajaxService 对请求中的参数数据验证不足导致的。
宏景 eHR ajaxService SQL注入漏洞 1
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Sec-Fork/POC-20240918/blob/main/%E5%AE%8F%E6%99%AFOA/%E5%AE%8F%E6%99%AFeHR%E7%B3%BB%E7%BB%9FajaxService%E6%8E%A5%E5%8F%A3%E5%A4%84%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://gitea.com/Run0nceEx/POC/src/branch/main/%E5%AE%8F%E6%99%AFOA
https://www.secrss.com/articles/54590
https://blog.csdn.net/qq_36618918/article/details/135557652
https://www.cnblogs.com/pursue-security/p/17704093.html
https://ddpoc.com/DVB-2024-7812.html
http://152.67.113.27/articles/%E5%AE%8F%E6%99%AFeHR+ajaxajaxService+SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0_10874271_csdn.html
https://stack.chaitin.com/vuldb/detail?id=d9dbe920-46b9-47eb-91b2-a10892a250ea
https://cn-sec.com/archives/2758384.html