Update and rename 信呼OA办公系统后台uploadAction存在SQL注入.md to 信呼OA办公系统后台api.php接口存在RCE.md

This commit is contained in:
Rainyseason 2025-03-31 14:32:52 +08:00 committed by GitHub
parent 09ab6b2e37
commit a3f58d2aa8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -1,4 +1,4 @@
# 信呼OA办公系统后台uploadAction存在SQL注入
# 信呼OA办公系统后台api.php接口存在RCE
信呼OA办公系统是一个开源的在线办公系统。 信呼OA办公系统uploadAction存在SQL注入漏洞攻击者可利用该漏洞获取数据库敏感信息。
@ -34,4 +34,4 @@ sec-ch-ua-platform: "Windows"
## 漏洞来源
- https://forum.butian.net/article/613
- https://forum.butian.net/article/613