泛微OA_HrmCareerApplyPerEdit.jsp参数注入

2021-01-19 泛微OA PoC No

Description

早期的泛微OA7在/pweb/careerapply/HrmCareerApplyPerEdit.jsp接口存在未授权访问和SQL注入,参数id存在SQL注入漏洞,攻击者可以通过此漏洞获取系统数据库中敏感信息。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities