References https://qkl.seebug.org/vuldb/ssvid-90515 https://wy.zone.ci/bug_detail.php?wybug_id=wooyun-2015-0133721 https://qkl.seebug.org/vuldb/ssvid-93826 https://wy.zone.ci/bug_detail.php?wybug_id=wooyun-2015-0135147
Related VulnerabilitiesVersa Concerto /portalapi/v1/roles/option 权限绕过漏洞（CVE-2025-34027）WIFISKY 7层流控路由器 /portal/ibilling/index.php 命令执行漏洞大华智慧园区综合管理平台 /portal/itc/attachment_downloadByUrlAtt.action 文件读取漏洞用友NC /portal/pt/M0dUlE/redeploy SQL 注入漏洞PoC用友 NC /portal/pt/portalpage/importPml XML 外部实体注入漏洞PoC用友 NC /portal/pt/oacoSchedulerEvents/deleteEvent SQL 注入漏洞PoC用友 NC /portal/pt/servlet/workflowImageServlet/doPost SQL 注入漏洞PoC用友NC /portal/pt/psnImage/download SQL 注入漏洞PoC用友Bip /bi/api/Portal/LoginWithV8 目录遍历漏洞（CVE-2025-66744）用友NC /portal/pt/portalcombo/importCombo XML 外部实体注入漏洞PoC用友BIP数据应用服务 /bi/api/Portal/LoginWithV8 信息泄露漏洞