Description
用友时空-KSOA系统是一款企业信息管理系统，提供多种业务管理功能。其 /worksheet/agent_worksdel.jsp 接口存在SQL时间盲注漏洞，攻击者可通过构造含WAITFOR DELAY的恶意id参数，利用响应时间差执行时间盲注，可能导致敏感数据泄露或服务器被控制。
用友时空-KSOA /worksheet/agent_worksdel.jsp SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/master-abc/cve/blob/main/Yonyou%20Space-Time%20Enterprise%20Information%20Integration%20KSOA%20Platformworksheetagent_worksdel.jsp%20SQL%20injection.md
https://nvd.nist.gov/vuln/detail/CVE-2025-15424
https://www.sentinelone.com/vulnerability-database/cve-2025-15424/
https://www.cvedetails.com/cve/CVE-2025-15424/
https://cve.imfht.com/detail/CVE-2025-15424?lang=en
https://access.redhat.com/security/cve/cve-2025-15424
https://security-tracker.debian.org/tracker/CVE-2025-15424
https://app.opencve.io/cve/?vendor=yonyou
https://www.redpacketsecurity.com/cve-alert-cve-2025-15424-yonyou-ksoa/
https://strobes.co/vi/cve/CVE-2025-15424