References https://mrxn.net/jswz/ioffice-MobileBind-sqli.html https://www.gm7.org/archives/341 https://mrxn.net/tag/sql%E6%B3%A8%E5%85%A5 https://cn-sec.com/archives/4673779.html https://mrxn.net/jswz/page/10
Related Vulnerabilities红帆OA /ioffice/prg/Mobile/Base/MobileBind.aspx SQL 注入漏洞红帆ioffice HbcaUserLogin.aspx SQL注入漏洞红帆ioffice mrClearPwd.aspx SQL注入漏洞红帆ioffice PgcaUserLogin.aspx SQL注入漏洞红帆 iOffice /ioffice/Identity/HbcaUserLogin.aspx 存在SQL注入漏洞PoChongfan-iodesktopdata-sqli: 红帆iOffice ioDesktopData.asmx接口SQL注入PoChongfan-ioffice-iofiledown-fileread: 红帆 iOffice ioFileDown 任意文件读取漏洞PoCioffice-oa-iofileexport-read-file: 红帆OA ioFileExport.aspx 任意文件读取漏洞PoCioffice-oa-udfmr-asmx-sql-inject: 红帆OA udfmr.asmx SQL注入漏洞PoChongfan-ioffice-lfi: Hongfan OA ioFileExport.aspx - Arbitrary File ReadPoChongfan-ioffice-rce: Hongfan OA ioAssistance.asmx - Remote Code ExecutionPoChongfan-ioffice-sqli: Hongfan OA udfmr.asmx - SQL injection