From 65396d4c20fa71aac4b5ef0ff8daf131ddf0e5ab Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E4=B8=9C=E6=96=B9=E6=9C=89=E9=B1=BC=E5=90=8D=E4=B8=BA?= =?UTF-8?q?=E5=92=B8?= Date: Sat, 19 Jul 2025 15:12:12 +0800 Subject: [PATCH] Update README.md MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Salia PLCC check.php 未授权访问致信息泄露 银达汇智智慧综合管理平台 PPlugList.ashx SQL注入漏洞 万户ezOFFICE govdocumentmanager_judge_receivenum.jsp SQL注入漏洞 银达汇智智慧综合管理平台 ADTag_Info.ashx SQL注入漏洞 JeeWMS AuthInterceptor 权限绕过漏洞 银达汇智智慧综合管理平台 SysMenuScheme.ashx SQL注入漏洞 Salia PLCC nwcheckexec.php 命令执行漏洞 用友U8 CRM biztype.php SQL注入漏洞 灵当CRM Playforrecord.php 文件读取漏洞 Salia PLCC check_req.php 命令执行漏洞 JeeWMS cgformTemplateController.do 文件读取漏洞 用友NC及NC Cloud系统 getBapTableDatas SQL注入漏洞 Optilink 管理系统 gene.php 命令执行漏洞 NetMizer日志管理系统 terminals.php SQL注入漏洞 用友U8 CRM checkselectworksheet.php SQL注入漏洞 泛微e-office SignatureDel.php sql注入漏洞 泛微e-office upload.php 文件上传漏洞 泛微e-office OfficeServer.php 文件上传漏洞 泛微e-office OfficeServer.php 文件读取漏洞 泛微e-office OfficeServer2.php 文件读取漏洞 锐捷-EWEB common.php 文件读取漏洞 锐捷-EWEB dns.php 文件读取漏洞 泛微e-office OfficeServer2.php 文件上传漏洞 用友U8 CRM ajaxgetborrowdata.php SQL注入漏洞 锐捷-EWEB download.php 文件读取漏洞 用友U8 CRM objectview.php SQL注入漏洞 锐捷-EWEB dhcp.php 文件读取漏洞 锐捷-EWEB ipam.php 文件读取漏洞 Unibox路由器 authentication/test_userlogin.php 命令执行漏洞 锐捷-EWEB cli.php 命令注入漏洞 Unibox路由器 network/checkstatus_ping.php 命令执行漏洞 --- README.md | 32 +++++++++++++++++++++++++++++++- 1 file changed, 31 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 8b41c72..6a97e52 100644 --- a/README.md +++ b/README.md @@ -602,7 +602,37 @@ - [Synway SMG网关管理软件 9-2radius.php 命令注入漏洞](https://mrxn.net/jswz/synway-9-2radius-rce.html) - [三汇SMG 网关管理软件 down.php 任意文件读取漏洞](https://mrxn.net/jswz/synway-down-fileread.html) - [汉塔科技上网行为管理系统 cappkt.php 命令注入漏洞](https://mrxn.net/jswz/antasys-dgn_tools-cappkt-rce.html) - +- [Salia PLCC check.php 未授权访问致信息泄露](https://mrxn.net/jswz/salia-check-unauth-data-leak.html) +- [银达汇智智慧综合管理平台 PPlugList.ashx SQL注入漏洞](https://mrxn.net/jswz/windor-Module-CJGL-Controller-PPlugList-sqli.html) +- [万户ezOFFICE govdocumentmanager_judge_receivenum.jsp SQL注入漏洞](https://mrxn.net/jswz/defaultroot-ezOFFICE-govdocumentmanager_judge_receivenum-numId-sqli.html) +- [银达汇智智慧综合管理平台 ADTag_Info.ashx SQL注入漏洞](https://mrxn.net/jswz/windor-Module-BPCJ-AD_Tag-Controller-ADTag_Info-sqli.html) +- [JeeWMS AuthInterceptor 权限绕过漏洞](https://mrxn.net/jswz/JeeWMS-AuthInterceptor-authbypass.html) +- [银达汇智智慧综合管理平台 SysMenuScheme.ashx SQL注入漏洞](https://mrxn.net/jswz/windor-Module-Kernel-Controller-SysMenuScheme-sqli.html) +- [Salia PLCC nwcheckexec.php 命令执行漏洞](https://mrxn.net/jswz/salia-nwcheckexec-dest-topic-rce.html) +- [用友U8 CRM biztype.php SQL注入漏洞](https://mrxn.net/jswz/yonyon-u8crm-activity-biztype-actvtID-sqli.html) +- [灵当CRM Playforrecord.php 文件读取漏洞](https://mrxn.net/jswz/51mis-modules-Accounts-Playforrecord-download-fileread.html) +- [Salia PLCC check_req.php 命令执行漏洞](https://mrxn.net/jswz/salia-check_req-ntp-rce.html) +- [JeeWMS cgformTemplateController.do 文件读取漏洞](https://mrxn.net/jswz/JeeWMS-cgformTemplateController-showPic-fileread.html) +- [用友NC及NC Cloud系统 getBapTableDatas SQL注入漏洞](https://mrxn.net/jswz/yonyou-ncc-uapws-service-IBapIOService-getBapTableDatas-sqli.html) +- [Optilink 管理系统 gene.php 命令执行漏洞](https://mrxn.net/jswz/optilink-cgi-fsystem-gene-2rce.html) +- [NetMizer日志管理系统 terminals.php SQL注入漏洞](https://mrxn.net/jswz/netmizer-data-echart-terminals-device-sqli.html) +- [用友U8 CRM checkselectworksheet.php SQL注入漏洞](https://mrxn.net/jswz/yonyon-u8crm-servicequotation-checkselectworksheet-sqli.html) +- [泛微e-office SignatureDel.php sql注入漏洞](https://mrxn.net/jswz/eoffice-iWebOffice-Signature-SignatureDel-SignatureID-sqli.html) +- [泛微e-office upload.php 文件上传漏洞](https://mrxn.net/jswz/eoffice-webservice-upload-rce.html) +- [泛微e-office OfficeServer.php 文件上传漏洞](https://mrxn.net/jswz/eoffice-iWebOffice-OfficeServer-rce.html) +- [泛微e-office OfficeServer.php 文件读取漏洞](https://mrxn.net/jswz/eoffice-iWebOffice-OfficeServer-fileread.html) +- [泛微e-office OfficeServer2.php 文件读取漏洞](https://mrxn.net/jswz/eoffice-iWebOffice-OfficeServer2-fileread.html) +- [锐捷-EWEB common.php 文件读取漏洞](https://mrxn.net/jswz/ruijieweb-common-fileread.html) +- [锐捷-EWEB dns.php 文件读取漏洞](https://mrxn.net/jswz/ruijieweb-dns-fileread.html) +- [泛微e-office OfficeServer2.php 文件上传漏洞](https://mrxn.net/jswz/eoffice-iWebOffice-OfficeServer2-rce.html) +- [用友U8 CRM ajaxgetborrowdata.php SQL注入漏洞](https://mrxn.net/jswz/yonyon-u8crm-borrowout-ajaxgetborrowdata-sqli.html) +- [锐捷-EWEB download.php 文件读取漏洞](https://mrxn.net/jswz/ruijieweb-download-fileread.html) +- [用友U8 CRM objectview.php SQL注入漏洞](https://mrxn.net/jswz/yonyon-u8crm-pub-objectview-ID-sqli.html) +- [锐捷-EWEB dhcp.php 文件读取漏洞](https://mrxn.net/jswz/ruijieweb-dhcp-fileread.html) +- [锐捷-EWEB ipam.php 文件读取漏洞](https://mrxn.net/jswz/ruijieweb-ipam-fileread.html) +- [Unibox路由器 authentication/test_userlogin.php 命令执行漏洞](https://mrxn.net/jswz/unibox-authentication-test_userlogin-rce.html) +- [锐捷-EWEB cli.php 命令注入漏洞](https://mrxn.net/jswz/ruijieweb-cli-rce.html) +- [Unibox路由器 network/checkstatus_ping.php 命令执行漏洞](https://mrxn.net/jswz/unibox-network-checkstatus_ping-rce.html) ## 提权辅助相关