用友协作办公平台存在多个通杀SQL注入漏洞,位于/sysform/目录下。使用最高权限(nt authority\system)运行。漏洞测试结果如图所示
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo