金蝶EAS /easportal/tools/appUtil.jsp 路径存在任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://cn-sec.com/archives/2572160.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E9%87%91%E8%9D%B6/%E9%87%91%E8%9D%B6EAS%E5%AD%98%E5%9C%A8appUtil.jsp%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
• https://cn-sec.com/archives/3413737.html
• https://rivers.chaitin.cn/blog/cq94t010lnechd2447kg
• https://www.sudun.com/ask/90259.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E9%87%91%E8%9D%B6/%E9%87%91%E8%9D%B6EAS%20myUploadFile%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
• https://www.cnblogs.com/spmonkey/p/17843406.html

Related Vulnerabilities

• 金蝶EAS /ormrpc/services/BSHService 代码执行漏洞
• PoC金蝶 EAS /easweb/cp/dm/pdfViewLocal.jsp 文件读取漏洞
• PoCjindie-eas-autologin-rce: 金蝶 EAS Cloud autoLogin.jsp 远程代码执行漏洞
• PoC金蝶EAS /easportal/autoLogin.jsp 代码执行漏洞
• 金蝶-EAS-Cloud 弱口令漏洞
• PoC金蝶EAS HandleKinggridServlet 任意文件上传漏洞
• 金蝶EAS 任意文件上传漏洞
• 金蝶EAS /pdfViewLocal.jsp 文件读取漏洞
• PoC金蝶 EAS HandleKinggridServlet 存在任意文件上传漏洞
• 金蝶-EAS easWebClient 任意文件下载漏洞
• 金蝶 EAS pdfviewlocal 任意文件读取漏洞