万户OA /file2Html.controller 接口存在任意文件上传漏洞

2023-11-02 万户OA PoC No

Description

万户oa /defaultroot/yzConvertFile/file2Html.controller 任意文件上传，攻击者可以获取服务器权限

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities