Description
广联达oa 存在任意文件上传漏洞。需要先利用 广联达 OA SQL注入漏洞获取 admin 密码，然后登录后通过 /gtp/im/services/group/msgbroadcastuploadfile.aspx 文件上传接口上传任意文件。
FOFA: body="/Services/Identification/"
glodon-oa-msgbroadcastuploadfile-uploadfile: 广联达oa 后台文件上传漏洞 (需登录)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/%E5%B9%BF%E8%81%94%E8%BE%BE-Linkworks-msgbroadcastuploadfile.aspx-%E5%90%8E%E5%8F%B0%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://developer.aliyun.com/article/1333017
https://blog.csdn.net/qq_44905116/article/details/137102773
https://bbs.decoyit.com/thread-595-1-1.html