References https://www.cnblogs.com/spmonkey/p/17858153.html https://github.com/Only-MrLi/POC/blob/main/%E8%93%9D%E5%87%8COAsysUiComponent_%E6%96%87%E4%BB%B6%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://blog.csdn.net/qq_33906495/article/details/135220684 https://stack.chaitin.com/tool/detail/1256 https://www.lmboke.com/archives/lan-ling-oalou-dong-li-yong-zong-jie https://www.ddpoc.com/DVB-2023-5487.html
Related Vulnerabilities蓝凌EKP /third/im/kk/webparts/getGzhInfo.jsp 服务器端请求伪造漏洞蓝凌OA erp_data.jsp存在远程命令执行漏洞蓝凌OA sysUiExtend.do 存在任意文件上传漏洞PoClandray-dataxml-jsp-rce: 蓝凌OA dataxml.jsp 远程命令执行漏洞PoClandray-ekp-sysFormMainDataInsystemWebservice-fileread: Landray EKP sysFormMainDataInsystemWebservice File ReadPoClandray-oa-datajson-rce: Landray OA Datajson RCEPoClandray-oa-kmImeetingBookWebService-fileread: Landray OA kmImeetingBookWebService File ReadPoClandray-oa-kmImeetingResWebService-fileread: Landray OA kmImeetingResWebService File ReadPoClandray-oa-loginWebserviceService-fileread: Landray OA loginWebserviceService File ReadPoClandray-oa-sysNotifyTodoWebService-fileread: Landray OA sysNotifyTodoWebService File ReadPoClandray-oa-sysNotifyTodoWebServiceEkpj-fileread: Landray OA sysNotifyTodoWebServiceEkpj File ReadPoClandray-oa-syssearchmain-rce: Landray sysSearchMain.do RCE