References https://stack.chaitin.com/poc/detail/4294 https://zhuanlan.zhihu.com/p/636981077 https://cn-sec.com/archives/2108255.html https://github.com/Sec-Fork/POC-20240918/blob/main/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8B%E7%95%85%E6%8D%B7%E9%80%9A-TPlus-CheckMutex%E5%AD%98%E5%9C%A8sql%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md https://www.cnblogs.com/pursue-security/p/17684691.html https://github.com/Sweelg/QVD-2023-13612_TPlus-SQLvuln https://cn-sec.com/archives/2578791.html https://bbs.chaitin.cn/topic/506
Related VulnerabilitiesPoCgeoserver-jsonarraycontains-sqli: GeoServer jsonArrayContains CQL Filter - SQL InjectionPoCweaver-ecology9-doc-list-sqli: Weaver E-cology9 api/doc/out/more/list SQL InjectionPoC畅捷通T+ /tplus/GLSyncService.asmx/SimulationLoginNew SQL 注入漏洞PoCchanjet-crm-sqli: Chanjet CRM - SQL InjectionPoC畅捷通T+ /tplus/FormReport/FormReportOperateAction.aspx 文件读取漏洞畅捷通T+ /tplus/UFAQD/KeyRegister.aspx SQL 注入漏洞畅捷通T+ /tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanySettingController.Ufida.T.SM.UIP.ashx SQL 注入漏洞PoCwp-updraftplus-fpd: WordPress UpdraftPlus - Full Path Disclosure畅捷通-TPlus /tplus/ajaxpro/ASP_sm_setupaccount_versionupdate_selectbackupfileonserver_aspx App_Web_selectbackupfileonserver.aspx.1cbd2a00.ashx 目录遍历漏洞(CVE-2025-13788)Chanjet CRM /tools/upgradeattribute.php gblOrgID参数SQL注入漏洞amtt-hiboss-language-sqli: 安美数字酒店宽带运营系统SQL注入漏洞duomicms-sqli: Duomicms sqli