Description
灵当CRM的copyLinkToContent功能存在SSRF（服务器端请求伪造）漏洞，攻击者可以通过构造恶意请求，利用受害服务器向任意目标发送请求，可能导致敏感信息泄露或进一步的攻击。
灵当CRM /crm/WeiXinApp/marketing/index.php 服务器端请求伪造漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nosec.org/m/share/5903.html
https://cn-sec.com/archives/3192400.html
https://wiki.shikangsi.com/post/share/4d05b8c3-5464-48f3-bb14-a852b6e70abc
https://github.com/hackoadmin/POC2/blob/main/%E7%81%B5%E5%BD%93CRM/%E7%81%B5%E5%BD%93CRM%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3getOrderList%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://blog.csdn.net/m0_66808441/article/details/146780534