漏洞描述
JEECG (J2EE Code Generation) 中存在任意文件上传漏洞，此漏洞是由于commonController.do未充分验证用户输入的数据所导致的。
J2EE Code Generation commonController.do 任意文件上传漏洞
PoC代码
暂无相关漏洞推荐
- jeecgboot-commoncontroller-parserxml-fileupload: Jeecgboot commonController parserXml fileupload
- POC CVE-2021-24278: WordPress Contact Form 7 <2.3.4 - Arbitrary Nonce Generation
- POC CVE-2023-27587: ReadToMyShoe - Generation of Error Message Containing Sensitive Information
- POC CVE-2024-29868: Apache StreamPipes <= 0.93.0 - Use of Cryptographically Weak PRNG in Recovery Token Generation
- POC CVE-2024-9061: WP Popup Builder Popup Forms and Marketing Lead Generation <= 1.3.5 - Arbitrary Shortcode Execution
- POC gcp-cloud-func-gen1-deprecated: Deprecated 1st Generation Google Cloud Functions
- POC qianxin-netkang-next-generation-firewall-rce: Qianxin Netkang Next Generation Firewall - Remote Code Execution
- POC qi-anxin-netkang-next-generation-firewall-rce: Qi'anxin Netkang Next Generation Firewall - Remote Code Execution
- JeeWMS /rest/commonController.do XML 外部实体注入漏洞
- JeeWMS /rest/../commonController.do 文件上传漏洞
- JEEWMS commonController.do 任意文件上传
- PHPGurukul Medical Card Generation System SQL注入漏洞
- PHPGurukul Medical Card Generation System SQL注入漏洞