select @last_receipt = last_trans_no from retail_store where organization_no = @organization_no and store_no = @store_no select @seq = sequence_no from pos_total where store_no = @store_no and ...

宏景HCM pos_dept_post对传入的数据没有预编译和充足的校验，导致该接口存在SQL注入漏洞 ...