金和OA jc6 WebBill XXE漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E9%87%91%E5%92%8COA/%E9%87%91%E5%92%8COA-C6%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3ActionDataSet%E5%AD%98%E5%9C%A8XXE%E6%BC%8F%E6%B4%9E.md
• https://www.wlaqsys.com/archives/11724
• https://www.tutusec.com/2011.html
• http://cn-sec.com/archives/4588594.html
• https://hardware.clicksun.cn/mis/bbs/showapp.asp?id=33001
• https://www.wlaqsys.com/archives/11767
• https://blog.csdn.net/qq_33608000/article/details/136715288
• https://www.wlaqsys.com/archives/category/web1/%E9%87%91%E5%92%8Coa

Related Vulnerabilities

• 金和OA /c6/JHSoft.Web.CostControl/Decompose/AjaxForCenterBudgetDecompose.ashx SQL 注入漏洞
• 金和OA /c6/JHSoft.Web.CostControl/BudgetExecution/VouchUpdate.aspx SQL 注入漏洞
• 金和OA /C6/Jhsoft.Web.departments/GetTreeDate.aspx SQL 注入漏洞（CVE-2025-10090）
• 北京金和网络股份有限公司金和OA系统存在SQL注入漏洞
• 金和OA CostApplyHandler.ashx SQL注入漏洞
• 金和OA AjaxForDepartmentCollect.ashx SQL注入漏洞
• 金和OA EpassInitTakenSnInva.aspx XXE漏洞
• 金和OA EpassValidate.aspx XXE漏洞
• 金和OA EpassInitTakenSnExec.aspx XXE漏洞
• 金和OA LstGroupXml.aspx XXE漏洞
• 金和OA RegCodeInfo.aspx XXE漏洞
• 金和OA CrmSystemSet XXE漏洞
• 金和OA Departments-XmlHttp XXE漏洞