Description
“畅捷通T+”是一款基于互联网时代的企业管理软件，主要针对中小型工贸和商贸企业。该漏洞存在于/tplus/ajaxpro/Ufida.T.SM.UIP.Upgrade.UpgradeControler,Ufida.T.SM.UIP.ashx接口中，攻击者可以通过构造恶意的SQL语句，利用该漏洞实现数据库操作，可能导致敏感数据泄露、数据篡改等严重后果。
畅捷通T+ /tplus/ajaxpro/Ufida.T.SM.UIP.Upgrade.UpgradeControler,Ufida.T.SM.UIP.ashx SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/pursue-security/p/17684691.html
https://github.com/Sec-Fork/POC-20250106/blob/main/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8B%E7%95%85%E6%8D%B7%E9%80%9A-TPlus-CheckMutex%E5%AD%98%E5%9C%A8sql%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://www.ihonker.com/thread-34095-1-1.html
https://stack.chaitin.com/vuldb/detail/f4ae9a80-58c7-4a5c-a463-ae4e40605880
https://www.secrss.com/articles/55577
https://blog.nsfocus.net/t-sql/
https://www.anquanke.com/post/id/195226
https://zhuanlan.zhihu.com/p/636756923
https://blog.csdn.net/nglj9527/article/details/139303434
https://www.laoliang.net/cwrj/youyou/21537.html
https://cn-sec.com/archives/2578791.html
https://bbs.chaitin.cn/topic/506