金蝶OA document/upphoto_action.jsp 路径存在任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E9%87%91%E8%9D%B6/%E9%87%91%E8%9D%B6OA-EAS%E7%B3%BB%E7%BB%9F%20uploadLogo.action%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://www.cnblogs.com/spmonkey/p/17843406.html
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E9%87%91%E8%9D%B6OA-EAS%E7%B3%BB%E7%BB%9F-uploadLogo.action-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E9%87%91%E8%9D%B6/%E9%87%91%E8%9D%B6OA%E4%BA%91%E6%98%9F%E7%A9%BA%20ScpSupRegHandler%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md

Related Vulnerabilities

• 金蝶OA /add_folder.jsp 路径 current_file_id 参数存在SQL注入漏洞
• 金蝶OA /flow_performance_view_case_modify.jsp 路径存在SQL注入漏洞
• 金蝶OA /get_one_view_case.jsp 路径存在SQL注入漏洞
• 金蝶OA /netcom_out_rfile_submit.jsp 路径 netcom_id 参数存在SQL注入漏洞
• 金蝶OA /addmsg.jsp 路径存在SQL注入漏洞
• 金蝶OA 存在SQL注入漏洞
• 金蝶OA /save_file_property.jsp 路径存在SQL注入漏洞
• 金蝶OA /set_submit.jsp 路径 portlet_id 参数存在SQL注入漏洞
• 金蝶OA /document/view.jsp 路径 portal_id 参数存在SQL注入漏洞
• 金蝶OA /TemplateSave.jsp 路径 FileName 参数存在SQL注入漏洞