References https://github.com/adysec/POC/blob/main/wpoc/%E6%B7%B1%E6%BE%9C%E8%AE%A1%E8%B4%B9%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F/%E6%B7%B1%E6%BE%9C%E8%AE%A1%E8%B4%B9%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9Fstrategy%E5%AD%98%E5%9C%A8%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96RCE%E6%BC%8F%E6%B4%9E.md https://www.ddpoc.com/DVB-2024-7707.html https://cn-sec.com/archives/3023334.html https://wiki.shikangsi.com/list/wiki/?page=48 https://www.tutusec.com/page/15?orderby=views
Related VulnerabilitiesPoCCVE-2018-18775: Microstrategy Web 7 - Cross-Site ScriptingPoCCVE-2018-18777: Microstrategy Web 7 - Local File InclusionPoCCVE-2019-18957: MicroStrategy Library <11.1.3 - Cross-Site ScriptingPoCCVE-2020-11450: MicroStrategy Web 10.4 - Information DisclosurePoCmicrostrategy-ssrf: MicroStrategy tinyurl - Server-Side Request Forgery (Blind)深澜计费管理系统 /user/group/down-load 文件读取漏洞深澜计费管理系统 down-load 任意文件读取深澜计费管理系统strategy存在反序列化漏洞深澜计费管理系统 image-save 文件上传漏洞深澜计费管理系统 down-load 任意文件下载漏洞深澜计费管理系统 bind-ip/cancel-bind-ip 反序列化漏洞深澜计费管理系统 /user/group/down-load 任意文件读取漏洞