#企望制造ERP系统 RCE漏洞 POC
由于企望制造 ERP comboxstore.action接口权限设置不当，默认的配置可执行任意SQL语句，利用xp_cmdshell函数可远程执行命令，未经认证的攻击者可通过该漏洞获取服务器权限。
Usage:
python3 Hope_Erp.py -h
-
Notifications
You must be signed in to change notification settings - Fork 0
gallopsec/Hope_Erp
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
企望制造ERP系统 RCE POC
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published