泛微OA_/web/careerapply/HrmCareerApplyWorkEdit.jsp参数注入

早期的泛微OA7在/web/careerapply/HrmCareerApplyWorkEdit.jsp接口存在未授权访问和SQL注入，参数id存在SQL注入漏洞，攻击者可以通过此漏洞获取系统数据库中敏感信息。