Description
中成科信票务管理系统存在SQL注入漏洞。攻击者可以通过向/SystemManager/Api/TicketManager.ashx接口发送特制的SQL语句，利用该漏洞执行任意SQL查询，可能导致数据库信息泄露、数据篡改等严重后果。
中成科信票务管理系统 /SystemManager/Api/TicketManager.ashx SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E4%B8%AD%E6%88%90%E7%A7%91%E4%BF%A1%E7%A5%A8%E5%8A%A1%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F/%E4%B8%AD%E6%88%90%E7%A7%91%E4%BF%A1%E7%A5%A8%E5%8A%A1%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9FTicketManager.ashx%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://blog.csdn.net/m0_62828084/article/details/145543385
https://cn-sec.com/archives/3065345.html
https://www.ddpoc.com/DVB-2024-7918.html