易宝OA系统 getPosition SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/kk12-30/2025hvv/blob/main/%E6%98%93%E5%AE%9BOA-getPosition%E5%AD%98%E5%9C%A8sql%E6%B3%A8%E5%85%A5.txt
• https://zhuanlan.zhihu.com/p/1932214870562047555
• https://adg.csdn.net/694cfdbb5b9f5f31781ac04d.html
• https://www.tutusec.com/author/3/page/17?tab=post&orderby=sales_volume&status=publish
• https://www.zhihu.com/question/652641802/answer/1927524838223901200
• https://www.tutusec.com/category/%E6%BC%8F%E6%B4%9E%E6%83%85%E6%8A%A5?orderby=views

Related Vulnerabilities

• 易宝OA /api/files/DownloadFile2 文件读取漏洞
• 易宝 OA /SmartTradeScan/StockTake/SetScanQty txtBoxNo SQL 注入漏洞
• 易宝OA系统 IsPartNumber SQL注入漏洞
• 易宝OA-StockTake/IsPartNumber-存在SQL注入漏洞
• PoC易宝OA /SmartTradeScan/StockTake/IsPartNumber SQL 注入漏洞
• PoC易宝OA api/system/ExecuteQueryNoneResult SQL 注入漏洞
• PoC快普M6 GetPositionOfStaff存在SQL注入漏洞
• PoCyibao-oa-executesqlforsingle-sqli: 易宝OA系统ExecuteSqlForSingle接口存在SQL注入
• PoC易宝OA getPosition SQL注入漏洞
• 易宝OA-getPosition-存在sql注入漏洞
• 易宝OA /SmartTradeScan/StockTake/getPosition SQL 注入漏洞