漏洞描述
广联达科技股份有限公司作为数字建筑平台服务商,围绕工程项目的全生命周期,为客户提供数字化软硬件产品、解决方案及相关服务。广联达该公司旗下OA系统接口存在任意文件读取漏洞
广联达 OA do.asmx 接口存在任意文件读取
PoC代码
暂无相关漏洞推荐
- POC CVE-2020-13125: Ultimate Addons for Elementor <= 1.24.1 - Registration Bypass
- POC CVE-2021-4448: Kaswara Modern VC Addons <= 3.0.1 - Missing Authorization
- POC ambassador-api-diagnostics-exposure: Ambassador API Gateway Diagnostics - Exposure
- POC aem-jcr-exposure: Adobe AEM JCR Compare Exposure
- POC apache-mod-negotiation-listing: Apache mod_negotiation - Pseudo Directory Listing
- POC magento-downloader-fpd: Magento Downloader - Full Path Disclosure
- POC wp-hello-dolly-fpd: WordPress Plugin Hello Dolly - Full Path Disclosure
- NLB mKlik Macedonia SQL注入漏洞
- 北京万维盈创科技发展有限公司污染源在线监控系统AddorEditArea.aspx AreaIndex参数SQL注入漏洞
- POC 东胜物流管理软件 GetProParentModuTreeList 存在SQL注入漏洞.docx
- 天锐绿盾审批系统 trwfe/login.jsp/.%2e/user/findUserPageExcludeCurrentUser.do SQL 注入漏洞
- ERPNext /api/method/erpnext.crm.doctype.contract_template.contract_template.get_contract_template SQL 注入漏洞（CVE-2025-66435）
- ERPNext /api/method/erpnext.accounts.doctype.dunning.dunning.get_dunning_letter_text SQL 注入漏洞（CVE-2025-66434）