References https://www.cnblogs.com/pursue-security/p/17684989.html https://peiqi.wgpsec.org/wiki/oa/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8B%20FE%E5%8D%8F%E4%BD%9C%E5%8A%9E%E5%85%AC%E5%B9%B3%E5%8F%B0%20templateOfTaohong_manager.jsp%20%E7%9B%AE%E5%BD%95%E9%81%8D%E5%8E%86%E6%BC%8F%E6%B4%9E.html https://www.saury.net/1253.html https://www.ddpoc.com/DVB-2024-6870.html https://github.com/li8u99/yonyou_exp_plus https://github.com/ahisec/nuclei-tps/blob/main/http/vulnerabilities/yonyou/yonyou-fe-templateOfTaohong_manager-traversal.yaml https://github.com/MY0723/2022-Hvv-POC/blob/main/%E7%94%A8%E5%8F%8BFE%E5%8D%8F%E4%BD%9C%E5%8A%9E%E5%85%AC%E5%B9%B3%E5%8F%B0templateOfTaohong_manager.jsp%E7%9B%AE%E5%BD%95%E9%81%8D%E5%8E%86.md http://bbs.decoyit.com/forum.php?mod=viewthread&tid=218&page=1&mobile=1 https://cn-sec.com/archives/1878574.html https://github.com/novysodope/fupo_for_yonyou
Related VulnerabilitiesPoCyonyou-fe-templateoftaohong-manager-path-traversal: 用友 FE协作办公平台 templateOfTaohong_manager.jsp 目录遍历漏洞PoCyonyou-fe-directory-traversal: FE collaborative Office templateOfTaohong_manager.jsp - Path Traversal用友FE协同平台 /common/uploadFile.jsp 文件上传漏洞用友FE协同平台存在文件上传漏洞用友FE协作办公平台 templateOfTaohong_manager.jsp 目录遍历漏洞用友FE协同办公平台 /security/addUser.jsp 未授权访问漏洞用友FE协同办公平台 system-bean.xm 信息泄露漏洞用友FE 存在信息泄露漏洞用友FE /ProxyServletUtil 路径存在任意文件读取漏洞用友FE /groupTreeXml.jsp 路径存在SQL注入漏洞用友FE /addRole.jsp 路径存在SQL注入漏洞用友FE /carUseDetailList.jsp 路径存在SQL注入漏洞