References https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E9%A3%9E%E4%BC%81%E4%BA%92%E8%81%94/%E9%A3%9E%E4%BC%81%E4%BA%92%E8%81%94-FE%E4%BC%81%E4%B8%9A%E8%BF%90%E8%90%A5%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0publicData.jsp%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md https://gitee.com/yutons/POC/blob/main/%E9%A3%9E%E4%BC%81%E4%BA%92%E8%81%94-FE%E4%BC%81%E4%B8%9A%E8%BF%90%E8%90%A5%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0publicData.jsp%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md https://www.zhousa.com/archives/44809.html https://github.com/ax1sX/SecurityList/blob/main/Java_OA/FEOAv6.51.md
Related Vulnerabilities飞企互联 FE企业运营管理平台 /loginService.fe 权限绕过漏洞飞企互联 FE 业务协作平台 servlet/webchat/attachment/1 文件读取漏洞飞企互联-FE企业运营管理平台 attachment/1 存在任意文件读取feiqi-parsetree-sqli: 飞企互联-FE企业运营管理平台 parseTree 接口SQL注入飞企互联 OA FEwork /remoteServlet 远程代码执行漏洞飞企互联-FE企业运营管理平台 /sys/treeXml.js SQL 注入漏洞飞企互联-FE企业运营管理平台 /common/ajax_codewidget39.jsp;.js SQL 注入漏洞飞企互联-FE企业运营管理平台 /common/efficientCodewidget39.jsp;.js SQL 注入漏洞