Description
IDocView在/system/cmd.json存在任意命令执行漏洞
IDocView /system/cmd.json 任意命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://developer.baidu.com/article/details/2857269
https://juejin.cn/post/7317854227748290560
https://github.com/adysec/POC/blob/main/wpoc/iDocView/I%20Doc%20View%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://blog.csdn.net/xiayu729100940/article/details/135068973
https://www.wangsu.com/news/content/blog/3618
https://stack.chaitin.com/tool/detail/1257
https://cloud.tencent.com/developer/article/2376094
https://www.secrss.com/articles/60990
https://dev.to/sharon_42e16b8da44dabde6d/idocview-rce-vulnerability-how-a-simple-url-leads-to-remote-code-execution-1ccc
https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11_v2
https://www.sxcast.edu.cn/uploadfile/ueditor/file/202510/1761869308d5a4ea.pdf