Post

Zhixiang Oa Msglog Aspx Sql Injection Vulnerability

Zhixiang Oa Msglog Aspx Sql Injection Vulnerability

Zhixiang OA msglog.aspx SQL injection vulnerability

Vulnerability Description

There is a SQL injection vulnerability in the Zhixiang OA msglog.aspx file, and attackers can obtain sensitive information through the vulnerability.

Vulnerability Impact

Zhixiang OA

Network surveying and mapping

Vulnerability reappears

Product Page

img

The file with vulnerability is msglog.aspx, and the parameters involved in injection are user

1
/mainpage/msglog.aspx?user=1

img

This post is licensed under CC BY 4.0 by the author.