致远OA /wpsAssistServlet 接口任意文件读取漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• 致远 OA /seeyon/officeservlet 信息泄露漏洞
• PoC致远OA /seeyon/rest/m3/common/system/properties 信息泄露漏洞
• 致远互联 致远OA personalBind 任意用户密码修改漏洞
• 致远OA rest接口 前台密码重置漏洞
• PoCCNVD-2019-19299: 致远OA A8 htmlofficeservlet Remote Code Execution
• PoCCNVD-2020-62422: 致远oa系统存在任意文件读取漏洞
• PoCseeyon-a6-config-disclosure: 致远OA A6 config.jsp 敏感信息泄漏漏洞
• PoCseeyon-a6-createmysql-disclosure: 致远OA A6 createMysql.jsp 数据库敏感信息泄露
• PoCseeyon-a6-setextno-sql-inject: 致远OA A6 setextno.jsp SQL注入漏洞
• PoCseeyon-m1-usertokenservice-rce: 致远OA M1 server 反序列化命令执行漏洞
• PoCseeyon-management-default-password: 致远OA存在默认口令导致敏感信息泄露
• PoCseeyon-oa-ajax-fileupload: 致远OA ajax.do 任意文件上传