References https://github.com/D2550/ioffice_exp https://www.sohu.com/a/899305407_121124365 https://github.com/xinyisleep/pocscan https://zhuanlan.zhihu.com/p/1932214870562047555 https://www.sohu.com/a/899305407_121124365 http://zhousa.com/archives/84169.html
Related Vulnerabilities红帆OA WebServiceForWeixin.asmx 存在敏感信息泄露红帆OA /ioffice/prg/Mobile/Base/MobileBind.aspx SQL 注入漏洞PoCioffice-oa-udfmr-asmx-sql-inject: 红帆OA udfmr.asmx SQL注入漏洞PoC红帆OA NetCAUserLogin.aspx 存在SQL注入漏洞PoC红帆OA MobileOAEmailAddress SQL注入漏洞红帆OA /website/config/pc-app-config.js 信息泄露漏洞红帆OA list接口 SQL注入红帆OA docid SQL注入漏洞红帆OA jssrmyysql SQL注入漏洞红帆OA CAWS.asmx SQL注入漏洞红帆OA iorepsavexml 任意文件上传漏洞红帆OA任意文件读取漏洞