CVE-2024-39250 PoC — EfroTech Timetrax 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39250.yaml

Associated Vulnerability

Title:EfroTech Timetrax 安全漏洞 (CVE-2024-39250)
Description:EfroTech Timetrax是EfroTech公司的一个人力资源管理方案。 EfroTech Timetrax 8.3版本存在安全漏洞，该漏洞源于在搜索Web界面中的q参数中包含未经身份验证的SQL注入漏洞。

Description

EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface.

File Snapshot


 id: CVE-2024-39250

info:
  name: EfroTech Timetrax v8.3 - Sql Injection
  author: s4e-io,efran
  se

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!