金蝶EAS /pdfViewLocal.jsp 路径存在任意文件读取

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/zan8in/pocwiki/blob/main/%E9%87%91%E8%9D%B6EAS_pdfviewlocal%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
• https://blog.csdn.net/qq_36618918/article/details/135458108
• https://cn-sec.com/archives/2363395.html
• https://zone.ci/vulns/msec/307830.html
• https://www.ddpoc.com/DVB-2024-5888.html
• https://cn-sec.com/archives/2377754.html
• https://cn-sec.com/archives/2376954.html
• https://deded.de/archives/3e2e4368-97bf-401a-b56d-b2311c27a5d6

Related Vulnerabilities

• 金蝶EAS /ormrpc/services/BSHService 代码执行漏洞
• PoC金蝶 EAS /easweb/cp/dm/pdfViewLocal.jsp 文件读取漏洞
• PoCjindie-eas-autologin-rce: 金蝶 EAS Cloud autoLogin.jsp 远程代码执行漏洞
• PoC金蝶EAS /easportal/autoLogin.jsp 代码执行漏洞
• 金蝶-EAS-Cloud 弱口令漏洞
• PoC金蝶EAS HandleKinggridServlet 任意文件上传漏洞
• 金蝶EAS 任意文件上传漏洞
• 金蝶EAS /pdfViewLocal.jsp 文件读取漏洞
• PoC金蝶 EAS HandleKinggridServlet 存在任意文件上传漏洞
• 金蝶-EAS easWebClient 任意文件下载漏洞
• 金蝶 EAS pdfviewlocal 任意文件读取漏洞