漏洞描述
万户软件网络是业内普遍认可的智慧政务办公专家,OA系统国家行业标准编制组长单位,协同软件国家行业标准编制组长单位,22年专注协同管理领域.为您提供定制化的智慧政务一体化办公解决方案
万户OA /defaultroot/public/iWebOfficeSign/Dossier_DocumentEdit SQL 注入漏洞
PoC代码
暂无相关漏洞推荐
- POC wanhu-oa-rhinoscript-engineservice-rce: 万户OA-RhinoScriptEngineService命令执行
- POC wanhu-download-ftp-file-read: Wanhu OA download_ftp.jsp - Arbitrary File Read
- POC wanhu-download-old-file-read: Wanhu OA download_old.jsp - Arbitrary File Read
- POC wanhu-oa-fileupload-controller: Wanhu OA Fileupload Controller - Arbitrary File Upload
- POC wanhu-teleconferenceservice-xxe: Wanhu OA TeleConferenceService Interface - XML External Entity Injection
- POC wanhuoa-downloadservlet-lfi: Wanhu OA DownloadServlet - Remote File Disclosure
- POC wanhuoa-officeserverservlet-file-upload: Wanhu OA OfficeServerServlet - Arbitrary File Upload
- POC wanhuoa-smartupload-file-upload: Wanhu OA smartUpload.jsp - Arbitrary File Upload
- 万户OA TeleConferenceService XXE漏洞
- 万户OA TeleConferenceService XXE漏洞
- 万户OA graph_include.jsp SQL注入漏洞