金蝶EAS 存在目录遍历漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.cnvd.org.cn/flaw/show/CNVD-2021-09699
• https://www.ddpoc.com/poc/DVB-2021-2505.html
• https://www.modb.pro/db/120388
• https://github.com/Threekiii/Awesome-POC/blob/master/OA%E4%BA%A7%E5%93%81%E6%BC%8F%E6%B4%9E/%E9%87%91%E8%9D%B6OA%20server_file%20%E7%9B%AE%E5%BD%95%E9%81%8D%E5%8E%86%E6%BC%8F%E6%B4%9E.md
• https://zhuanlan.zhihu.com/p/378536524
• https://github.com/xinyisleep/pocscan/blob/main/%E9%87%91%E8%9D%B6OA-EAS%E7%9B%AE%E5%BD%95%E9%81%8D%E5%8E%86.py
• https://avd.aliyun.com/detail?id=AVD-2021-890093
• https://disk.scan.cm/All_wiki/%E4%BD%A9%E5%A5%87PeiQi-WIKI-POC-2021-7-20%E6%BC%8F%E6%B4%9E%E5%BA%93/PeiQi_Wiki/OA%E4%BA%A7%E5%93%81%E6%BC%8F%E6%B4%9E/%E9%87%91%E8%9D%B6OA/%E9%87%91%E8%9D%B6OA%20server_file%20%E7%9B%AE%E5%BD%95%E9%81%8D%E5%8E%86%E6%BC%8F%E6%B4%9E.md
• https://www.ddpoc.com/DVB-2024-6631.html
• https://zone.ci/aliyun/ali_nonvd/249017.html

Related Vulnerabilities

• 金蝶EAS /ormrpc/services/BSHService 代码执行漏洞
• PoC金蝶 EAS /easweb/cp/dm/pdfViewLocal.jsp 文件读取漏洞
• PoCjindie-eas-autologin-rce: 金蝶 EAS Cloud autoLogin.jsp 远程代码执行漏洞
• PoC金蝶EAS /easportal/autoLogin.jsp 代码执行漏洞
• 金蝶-EAS-Cloud 弱口令漏洞
• PoC金蝶EAS HandleKinggridServlet 任意文件上传漏洞
• 金蝶EAS 任意文件上传漏洞
• 金蝶EAS /pdfViewLocal.jsp 文件读取漏洞
• PoC金蝶 EAS HandleKinggridServlet 存在任意文件上传漏洞
• 金蝶-EAS easWebClient 任意文件下载漏洞
• 金蝶 EAS pdfviewlocal 任意文件读取漏洞