O2OA /x_program_center/jaxrs/config/open 后台任意文件读取漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/O2OA-open-%E5%90%8E%E5%8F%B0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
• https://novysodope.github.io/2021/11/01/65/
• https://www.ddpoc.com/DVB-2024-6866.html
• https://poc.cdxiaodong.life/
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/_sidebar.md

Related Vulnerabilities

• PoCo2oa /x_program_center/jaxrs/mpweixin/check XML 外部实体注入漏洞
• O2OA 默认口令漏洞
• PoCCNVD-2020-18740: O2OA invoke 后台远程命令执行漏洞 CNVD-2020-18740
• PoCo2oa-default-password: o2oa default password
• PoCo2-default-password: O2OA 后台默认密码
• PoCo2oa-open-read-file: O2OA open 后台任意文件读取漏洞
• PoCo2oa-default-login: O2OA - Default Login
• PoCo2oa-detect: O2OA 企业及团队办公平台
• O2OA 密码配置处存在任意文件写入漏洞
• O2OA 弱口令漏洞
• O2OA open 后台任意文件读取漏洞