Description
泛微E-Office 是一款广泛应用于企业的办公自动化系统。该漏洞存在于 /general/crm/record/detail.php 接口中，攻击者可以通过构造恶意的 SQL 查询语句，利用该漏洞获取数据库中的敏感信息，甚至可能导致数据库被完全控制。
泛微E-Office /general/crm/record/detail.php SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/ax1sX/SecurityList/blob/main/Other_OA/%E6%B3%9B%E5%BE%AEE-Office.md
https://download.xray.cool/vul/453vul.pdf
https://stack.chaitin.com/techblog/detail/180
https://mrxn.net/jswz/eoffice-general-new_mytable-content_list-content-sqli.html
http://www.aqtd.com/nd.jsp?fromColId=-1&id=6700&_ngc=-1
https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11_v2