Description
孚盟云CRM的 /m/Dingding/Ajax/DingHandler.ashx 接口存在SQL注入漏洞，攻击者可通过 empId参数构造恶意SQL语句，获取数据库敏感信息。
孚盟云 CRM PriceList.ashx SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://mrxn.net/jswz/fumacrm-Dingding-PriceList-sqli.html
https://blog.csdn.net/qq_41904294/article/details/135708887
https://github.com/mr-xn/penetration_testing_poc
https://www.ddpoc.com/DVB-2025-10212.html