References https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E6%B3%9B%E5%BE%AEOA-weaver.common.Ctrl-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://www.cnblogs.com/Zhu013/p/14813285.html https://www.modb.pro/db/190091 https://qkl.seebug.org/vuldb/ssvid-99250 https://www.modb.pro/db/75706 https://www.cnblogs.com/pt007/p/14826313.html https://blog.csdn.net/maverickpig/article/details/117290372 https://avd.aliyun.com/detail?id=AVD-2022-1113462 https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E6%B3%9B%E5%BE%AEOA-weaver.common.Ctrl-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://wiki.timlzh.com/Qingy-Wiki/Web%E5%AE%89%E5%85%A8/%E6%B3%9B%E5%BE%AEoa/%E6%B3%9B%E5%BE%AEOA%20weaver.common.Ctrl%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E/%E6%B3%9B%E5%BE%AEOA%20weaver.common.Ctrl%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.html
Related VulnerabilitiesPoCecology-execforstr-rce: Weaver Ecology ExecForStr Remote Command ExecutionPoCweaver-ecology9-doc-list-sqli: Weaver E-cology9 api/doc/out/more/list SQL InjectionPoCweaver-getemdslist-disclosure: Weaver E-cology getEmDsList Sensitive Information DisclosurePoC泛微OA E-Cology /rest/ofs/ProcessDoneRequestByXml XML 外部实体注入漏洞PoC泛微OA E-Cology /rest/ofs/ReceiveTodoRequestByXml XML 外部实体注入漏洞PoC泛微OA E-Cology /rest/ofs/deleteRequestInfoByXml XML 外部实体注入漏洞泛微OA /dwr/call/plaincall/ 权限绕过漏洞SAP Netweaver 未授权 反序列化漏洞PoC泛微OA ShowDocsImage SQL注入漏洞PoC泛微OA E-Cology Action.jsp mobile.skin.SkinAction 任意文件上传漏洞