扁鹊飞救智能急救与质控系统 CreateJKDA XML存在实体注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.ddpoc.com/DVB-2025-9343.html
• https://www.wlaqsys.com/archives/12580
• https://cn-sec.com/archives/4294684.html
• https://www.wlaqsys.com/archives/category/web1/page/8
• https://zhuanlan.zhihu.com/p/1932214870562047555
• https://cn-sec.com/archives/4160402.html
• https://nosec.org/m/share/5892.html
• https://www.tutusec.com/2111.html
• https://www.tutusec.com/1902.html
• https://www.wlaqsys.com/archives/category/web1/%E6%89%81%E9%B9%8A%E9%A3%9E%E6%95%91%E6%99%BA%E8%83%BD%E6%80%A5%E6%95%91%E4%B8%8E%E8%B4%A8%E6%8E%A7%E7%B3%BB%E7%BB%9F

Related Vulnerabilities

• 扁鹊飞救智能急救与质控系统 GetMonitorList SQL注入漏洞
• 扁鹊飞救智能急救与质控系统 /AppService/BQMedical/WebServiceForFirstaidApp.asmx/YZGH XML 外部实体注入漏洞
• PoC扁鹊飞救智能急救与质控系统 /AppService/BQMedical/WebServiceForFirstaidApp.asmx/CreateJKDA XML 外部实体注入漏洞
• 扁鹊飞救智能急救与质控系统 GetMonitorList 存在SQL注入漏洞