时空智友企业流程化管控系统 /formservice 任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://zhuanlan.zhihu.com/p/657691422
• https://blog.csdn.net/nnn2188185/article/details/133150748
• https://cn-sec.com/archives/2201816.html
• https://github.com/wudijun/skzy
• https://cn-sec.com/archives/1995934.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E4%BA%91%E6%97%B6%E7%A9%BA/%E6%97%B6%E7%A9%BA%E6%99%BA%E5%8F%8BERP%E7%B3%BB%E7%BB%9Fupdater.uploadStudioFile%E6%8E%A5%E5%8F%A3%E5%A4%84%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://blog.csdn.net/m0_46381222/article/details/143319717
• http://www.nic.bjchyedu.cn/xxaq/aqtg/202408/t20240819_104207.html
• https://cn-sec.com/archives/2895540.html
• https://github.com/Vme18000yuan/FreePOC

Related Vulnerabilities

• 时空智友ERP系统 /formservice updater.uploadStudioFile 文件上传漏洞
• 时空智友企业流程化管控系统 /formservice indexService.notice SQL 注入漏洞
• 时空智友ERP /formservice richclient.initRCForm XML 外部实体注入漏洞（CVE-2026-1218）
• 时空智友ERP /formservice/wf XML 外部实体注入漏洞
• PoCshikongzhiyou-formservice-upload-file: 时空智友企业流程化管控系统 任意文件上传漏洞
• PoCshikongzhiyou-richclient.openform-xxe: 时空智友企业流程化管控系统 XML 外部实体注入漏洞
• 时空智友企业流程化管控系统 richclient.openForm XML外部实体注入漏洞
• 时空智友企业信息管理系统 /formservice XML 外部实体注入漏洞
• 时空智友企业流程化管控系统indexService.notice存在sql注入漏洞
• 时空智友企业流程化管控系统 indexService.notice SQL注入漏洞