References https://qkl.seebug.org/vuldb/ssvid-93836 http://wooyun.2xss.cc/bug_detail.php?wybug_id=wooyun-2015-0158353 https://vulners.com/seebug/SSV:91894 https://github.com/adysec/POC/blob/main/wpoc/%E9%87%91%E8%9D%B6/%E9%87%91%E8%9D%B6OA-EAS%E7%B3%BB%E7%BB%9F%20uploadLogo.action%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://cn-sec.com/archives/2166658.html https://it.shanghaitech.edu.cn/2024/0409/c8406a1093717/page.htm https://www.h3c.com/cn/d_202312/1978826_30003_0.htm https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E9%87%91%E8%9D%B6/%E9%87%91%E8%9D%B6OA%E4%BA%91%E6%98%9F%E7%A9%BA%20ScpSupRegHandler%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://www.cnblogs.com/spmonkey/p/17843406.html https://stack.chaitin.com/vuldb/detail/eff4c35e-ee6c-4ef3-aa17-0debe079b983 https://blog.csdn.net/weixin_43981050/article/details/134523305 https://www.secrss.com/articles/60830