泛微E-Mobile 存在Struts2远程命令执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E6%B3%9B%E5%BE%AEOA/%E6%B3%9B%E5%BE%AEe-Mobile%E7%A7%BB%E5%8A%A8%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0error%E5%AD%98%E5%9C%A8%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
• https://baizesec.github.io/bylibrary/%E6%BC%8F%E6%B4%9E%E5%BA%93/01-CMS%E6%BC%8F%E6%B4%9E/%E6%B3%9B%E5%BE%AE/%E6%B3%9B%E5%BE%AEe-mobile%20ognl%E6%B3%A8%E5%85%A5/
• https://cn-sec.com/archives/826906.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E6%B3%9B%E5%BE%AEOA/%E6%B3%9B%E5%BE%AEE-MobileServer%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
• https://www.cnblogs.com/pursue-security/p/17672543.html
• https://xiaochuhe.blog.csdn.net/article/details/132272886
• https://xiaochuhe.blog.csdn.net/article/details/131857356
• https://github.com/Nriver/wy876-POC

Related Vulnerabilities

• 蓝凌EIS智慧协同平台 /Mobile/mobile_define.aspx/Getmobiles SQL 注入漏洞
• 速达软件 /common/print/print!doSavePrintTpl.action Struts2 代码执行漏洞
• PoCCVE-2025-13339: Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read
• PoCCVE-2026-10580: Hippoo Mobile App for WooCommerce <= 1.9.4 - Authentication Bypass to Admin Account Takeover
• PoCibm-mfp-default-login: IBM MobileFirst Foundation - Default Credentials
• PoC蓝凌EIS /mobileapp/Task/task_view.aspx SQL 注入漏洞
• LEAN MES系统 MobileAppLogin.ashx 存在SQL注入漏洞
• PoC友数聚科技-CPAS审计管理系统V4 /cpasm4/static/..;/mobileUploadPictureController/doDownLoadPicFile 文件读取漏洞
• Tattile ANPR Mobile 弱口令
• Ivanti Endpoint Manager Mobile /mifs/c/appstore/fob/3/5/sha256 命令执行漏洞（CVE-2026-1281/CVE-2026-1340）
• Ivanti Endpoint Manager Mobile 未授权 代码注入漏洞
• PoC东胜物流软件 /Areas/Mobile/Views/YunJia/YJCX.aspx SQL 注入漏洞