Description
蓝凌OA sysUiExtend.do 存在任意文件上传漏洞，攻击者可以利用该漏洞上传恶意文件执行任意命令，进而控制整个服务器。
蓝凌OA sysUiExtend.do 存在任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/spmonkey/p/17858153.html
https://github.com/ibaiw/2023Hvv/blob/main/%E8%93%9D%E5%87%8C-OA-RCE.md
https://blog.csdn.net/qq_33906495/article/details/135220684
https://stack.chaitin.com/tool/detail/1256
https://cn-sec.com/archives/2290348.html
https://zone.ci/e/search/result/?searchid=19
https://bbs.decoyit.com/thread-588-1-1.html