mirror of
https://github.com/Mr-xn/Penetration_Testing_POC.git
synced 2025-12-06 17:29:43 +08:00
Update README.md
月子会所ERP管理云平台 Page/ContractManager/ashx/Handler.ashx 任意文件上传漏洞 昂捷ERP cwsapprove.asmx SQL注入漏洞 月子会所ERP管理云平台 Page/MicroMall/ashx/Handler.ashx 任意文件上传漏洞 月子会所ERP管理云平台 Page/ICManager/ashx/Handler.ashx 任意文件上传漏洞 安美数字酒店宽带运营系统 get_user_enrollment.php SQL注入漏洞 用友NC rmwebImage/download sql注入漏洞 用友U8 Cloud MARosterPhotoServlet SQL注入漏洞 Synway SMG网关管理软件 9-12ping.php 远程代码执行漏洞（CVE-2025-1448） 时空智友企业流程化管控系统 updater.getStudioFile 任意文件读取漏洞 时空智友企业流程化管控系统 updater.startUpdateStudio XXE漏洞 银达汇智智慧综合管理平台 login.aspx SQL注入漏洞 百易云资产管理运营系统 feeStandard.Apply.save2.php SQL注入漏洞 百易云资产管理运营系统 admin.house.collect.php SQL注入漏洞（CVE-2025-1464） 泛微e-office sms_page.php sql注入漏洞 泛微e-office flow_xml.php sql注入漏洞 泛微e-office attendance.wsdl.php sql注入漏洞 泛微e-office notify.wsdl.php sql注入漏洞 泛微e-office online_person.wsdl.php sql注入漏洞 泛微e-office validate_sort.php sql注入漏洞 泛微e-office content_-4.php sql注入漏洞 泛微e-office block_content.php sql注入漏洞 泛微e-office word_update.php sql注入漏洞 泛微e-office freerunimgflow.php sql注入漏洞 泛微e-office runimgflow.php sql注入漏洞 安美数字酒店宽带运营系统 list_qry.php SQL注入漏洞 安美数字酒店宽带运营系统 get_ip.php SQL注入漏洞 用友NC/NCC文件服务器配置管理 FsConsoleService SQL注入漏洞 用友NC及NC Cloud系统 IBapIOService SQL注入漏洞 万户ezOFFICE selectCommentField.jsp SQL注入漏洞 泛微e-office sms.wsdl.php sql注入漏洞 泛微e-office user.wsdl.php sql注入漏洞 泛微e-office mobile.wsdl.php sql注入漏洞 泛微e-office list.wsdl.php sql注入漏洞 泛微e-office dept.wsdl.php sql注入漏洞 泛微e-office login.wsdl.php sql注入漏洞 泛微e-office email.wsdl.php sql注入漏洞 DedeCMS V5.7.117（最新版） RCE 用友NC LfwFileUploadServlet 任意文件上传漏洞 用友NC importTemplate XML实体注入（XXE）漏洞 EKing-管理易 FileDownload.ihtm 任意文件读取漏洞 用友U8 Cloud console.loadRes.d 任意文件读取漏洞 锐捷-EWEB timeout.php 命令注入漏洞 用友NC pkevalset SQL注入漏洞 锐捷-EWEB timeout.php 文件读取漏洞 用友NC portalpage/importPml sql注入漏洞 锐捷-EWEB timeout.php 文件上传漏洞 用友NC complainjudge SQL注入漏洞 FastJson 畸形Unicode bypass waf、流量检测 锐捷-EWEB patch.php 命令注入漏洞 汉塔科技上网行为管理系统 tracert.php 命令注入漏洞 汉塔科技上网行为管理系统 ping.php 命令注入漏洞 博斯外贸管理软件 DCreceiveBox.jsp 多处SQL注入漏洞
This commit is contained in:
东方有鱼名为咸
GitHub
52
README.md
52
README.md
@@ -507,6 +507,58 @@
|
||||
- [万户ezEIP productlist.aspx SQL注入漏洞](https://mrxn.net/jswz/ezEIP-shop-productlist-svids-sqli.html)
|
||||
- [昂捷ERP cwsqry.asmx SQL注入漏洞](https://mrxn.net/jswz/enjoyrmis-ws-reporttool-cwsqry-stablename-sqli.html)
|
||||
- [昂捷ERP cwsoa.asmx SQL注入漏洞](https://mrxn.net/jswz/enjoyrmis-ws-pos-cwsoa-sId-sqli.html)
|
||||
- [月子会所ERP管理云平台 Page/ContractManager/ashx/Handler.ashx 任意文件上传漏洞](https://mrxn.net/jswz/mamabaohe-ContractManager-rce.html)
|
||||
- [昂捷ERP cwsapprove.asmx SQL注入漏洞](https://mrxn.net/jswz/enjoyrmis-ws-approve-cwsapprove-sqli.html)
|
||||
- [月子会所ERP管理云平台 Page/MicroMall/ashx/Handler.ashx 任意文件上传漏洞](https://mrxn.net/jswz/mamabaohe-MicroMall-rce.html)
|
||||
- [月子会所ERP管理云平台 Page/ICManager/ashx/Handler.ashx 任意文件上传漏洞](https://mrxn.net/jswz/mamabaohe-ICManager-rce.html)
|
||||
- [安美数字酒店宽带运营系统 get_user_enrollment.php SQL注入漏洞](https://mrxn.net/jswz/amttgroup-get_user_enrollment-userid-sqli.html)
|
||||
- [用友NC rmwebImage/download sql注入漏洞](https://mrxn.net/jswz/yonyou-nc-rmwebImage-download-pk_psndoc-sqli.html)
|
||||
- [用友U8 Cloud MARosterPhotoServlet SQL注入漏洞](https://mrxn.net/jswz/yonyou-u8cloud-MARosterPhotoServlet-sqli.html)
|
||||
- [Synway SMG网关管理软件 9-12ping.php 远程代码执行漏洞（CVE-2025-1448）](https://mrxn.net/jswz/synway-9-12ping-rce.html)
|
||||
- [时空智友企业流程化管控系统 updater.getStudioFile 任意文件读取漏洞](https://mrxn.net/jswz/yonyou-updater-getStudioFile-fileread.html)
|
||||
- [时空智友企业流程化管控系统 updater.startUpdateStudio XXE漏洞](https://mrxn.net/jswz/yonyou-updater-startUpdateStudio-xxe.html)
|
||||
- [银达汇智智慧综合管理平台 login.aspx SQL注入漏洞](https://mrxn.net/jswz/windor-login-username-sqli.html)
|
||||
- [百易云资产管理运营系统 feeStandard.Apply.save2.php SQL注入漏洞](https://mrxn.net/jswz/baiyishequ-adminx-feeStandard-Apply-save2-sqli.html)
|
||||
- [百易云资产管理运营系统 admin.house.collect.php SQL注入漏洞（CVE-2025-1464）](https://mrxn.net/jswz/baiyishequ-wuser-admin-house-collect-sqli.html)
|
||||
- [泛微e-office sms_page.php sql注入漏洞](https://mrxn.net/jswz/eoffice-E-mobile-sms_page-detailid-sqli.html)
|
||||
- [泛微e-office flow_xml.php sql注入漏洞](https://mrxn.net/jswz/eoffice-general-system-workflow-flow_type-flow_xml-SORT_ID-sqli.html)
|
||||
- [泛微e-office attendance.wsdl.php sql注入漏洞](https://mrxn.net/jswz/eoffice-webservice-json-attendance-attendance-wsdl-SaveAttendance-sqli.html)
|
||||
- [泛微e-office notify.wsdl.php sql注入漏洞](https://mrxn.net/jswz/eoffice-webservice-json-notify-wsdl-sqli.html)
|
||||
- [泛微e-office online_person.wsdl.php sql注入漏洞](https://mrxn.net/jswz/eoffice-webservice-json-online_person-online_person-wsdl-sqli.html)
|
||||
- [泛微e-office validate_sort.php sql注入漏洞](https://mrxn.net/jswz/eoffice-general-officeitem-sort-validate_sort-sqli.html)
|
||||
- [泛微e-office content_-4.php sql注入漏洞](https://mrxn.net/jswz/eoffice-general-new_mytable-content_list-content-sqli.html)
|
||||
- [泛微e-office block_content.php sql注入漏洞](https://mrxn.net/jswz/eoffice-general-new_mytable-block_content-sqli.html)
|
||||
- [泛微e-office word_update.php sql注入漏洞](https://mrxn.net/jswz/eoffice-general-system-interface-loginedit-word_update.html)
|
||||
- [泛微e-office freerunimgflow.php sql注入漏洞](https://mrxn.net/jswz/eoffice-general-workflow-freerunimgflow-sqli.html)
|
||||
- [泛微e-office runimgflow.php sql注入漏洞](https://mrxn.net/jswz/eoffice-general-workflow-runimgflow-sqli.html)
|
||||
- [安美数字酒店宽带运营系统 list_qry.php SQL注入漏洞](https://mrxn.net/jswz/amttgroup-user-list_qry-UserID-sqli.html)
|
||||
- [安美数字酒店宽带运营系统 get_ip.php SQL注入漏洞](https://mrxn.net/jswz/amttgroup-user-get_ip-vlanid-sqli.html)
|
||||
- [用友NC/NCC文件服务器配置管理 FsConsoleService SQL注入漏洞](https://mrxn.net/jswz/yonyou-ncc-uap-pub-fs-console-FsConsoleService-confData-sqli.html)
|
||||
- [用友NC及NC Cloud系统 IBapIOService SQL注入漏洞](https://mrxn.net/jswz/yonyou-ncc-uapws-service-IBapIOService-getBapTable-sqli.html)
|
||||
- [万户ezOFFICE selectCommentField.jsp SQL注入漏洞](https://mrxn.net/jswz/defaultroot-ezOFFICE-selectCommentField-tableId-sqli.html)
|
||||
- [泛微e-office sms.wsdl.php sql注入漏洞](https://mrxn.net/jswz/eoffice-webservice-json-sms-wsdl-sqli.html)
|
||||
- [泛微e-office user.wsdl.php sql注入漏洞](https://mrxn.net/jswz/eoffice-webservice-json-user-wsdl-sqli.html)
|
||||
- [泛微e-office mobile.wsdl.php sql注入漏洞](https://mrxn.net/jswz/eoffice-webservice-json-mobile-wsdl-sqli.html)
|
||||
- [泛微e-office list.wsdl.php sql注入漏洞](https://mrxn.net/jswz/eoffice-webservice-json-list-wsdl-sqli.html)
|
||||
- [泛微e-office dept.wsdl.php sql注入漏洞](https://mrxn.net/jswz/eoffice-webservice-json-dept-wsdl-sqli.html)
|
||||
- [泛微e-office login.wsdl.php sql注入漏洞](https://mrxn.net/jswz/eoffice-webservice-json-login-wsdl-sqli.html)
|
||||
- [泛微e-office email.wsdl.php sql注入漏洞](https://mrxn.net/jswz/eoffice-webservice-json-email-wsdl-sqli.html)
|
||||
- [DedeCMS V5.7.117（最新版） RCE](https://mrxn.net/jswz/DedeCMS-V5_7_117-RCE.html)
|
||||
- [用友NC LfwFileUploadServlet 任意文件上传漏洞](https://mrxn.net/jswz/yonyou-ncc-LfwFileUploadServlet-rce.html)
|
||||
- [用友NC importTemplate XML实体注入（XXE）漏洞](https://mrxn.net/jswz/yonyou-nc-portaltemplate-importTemplate-xxe.html)
|
||||
- [EKing-管理易 FileDownload.ihtm 任意文件读取漏洞](https://mrxn.net/jswz/eking-FileDownload-handleFileDownload.html)
|
||||
- [用友U8 Cloud console.loadRes.d 任意文件读取漏洞](https://mrxn.net/jswz/yonyou-u8cloud-console-loadRes-fileread.html)
|
||||
- [锐捷-EWEB timeout.php 命令注入漏洞](https://mrxn.net/jswz/ruijieweb-system_pi-timeout-patchsyslog-rce.html)
|
||||
- [用友NC pkevalset SQL注入漏洞](https://mrxn.net/jswz/yonyou-nc-evalschedule-pkevalset-sqli.html)
|
||||
- [锐捷-EWEB timeout.php 文件读取漏洞](https://mrxn.net/jswz/ruijieweb-system_pi-timeout-fileread.html)
|
||||
- [用友NC portalpage/importPml sql注入漏洞](https://mrxn.net/jswz/yonyou-nc-portalpage-importPml-billitem-sqli.html)
|
||||
- [锐捷-EWEB timeout.php 文件上传漏洞](https://mrxn.net/jswz/ruijieweb-system_pi-timeout-rce.html)
|
||||
- [用友NC complainjudge SQL注入漏洞](https://mrxn.net/jswz/yonyou-nc-advorappcoll-complainjudge-pk_complaint-sqli.html)
|
||||
- [FastJson 畸形Unicode bypass waf、流量检测](https://mrxn.net/jswz/fastjson-bypass-waf-tips.html)
|
||||
- [锐捷-EWEB patch.php 命令注入漏洞](https://mrxn.net/jswz/ruijieweb-patch-setPatchAutoTime-rce.html)
|
||||
- [汉塔科技上网行为管理系统 tracert.php 命令注入漏洞](https://mrxn.net/jswz/antasys-dgn_tools-tracert-rce.html)
|
||||
- [汉塔科技上网行为管理系统 ping.php 命令注入漏洞](https://mrxn.net/jswz/antasys-dgn_tools-ping-rce.html)
|
||||
- [博斯外贸管理软件 DCreceiveBox.jsp 多处SQL注入漏洞](https://mrxn.net/jswz/51boss-crm-module-DCreceiveBox-sqli.html)
|
||||
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user