Description
通达OA存在文件包含漏洞，此漏洞是未充分验证用户输入导致的。
通达OA文件包含漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/PANDA-Mosen/p/13365342.html
https://github.com/Threekiii/Awesome-POC/blob/master/OA%E4%BA%A7%E5%93%81%E6%BC%8F%E6%B4%9E/%E9%80%9A%E8%BE%BEOA%20v11.8%20update.php%20%E5%90%8E%E5%8F%B0%E6%96%87%E4%BB%B6%E5%8C%85%E5%90%AB%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
https://blog.csdn.net/qq_34594929/article/details/132754669
https://joner11234.github.io/article/bdd0a488.html
https://lanvnal.com/2020/03/31/tong-da-oa-ren-yi-wen-jian-shang-chuan-wen-jian-bao-han/
https://blog.mo60.cn/index.php/archives/239.html
https://cloud.tencent.com/developer/article/2288066
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E9%80%9A%E8%BE%BEOA/%E9%80%9A%E8%BE%BEOA%20%E6%96%87%E4%BB%B6%E5%8C%85%E5%90%AB%E6%BC%8F%E6%B4%9E/
https://www.secrss.com/articles/17947
https://www.anquanke.com/post/id/201174
https://www.secevery.com/toBugInfo?id=1873993719219011586
https://www.cnvd.org.cn/flaw/show/CNVD-2019-12766
https://qkl.seebug.org/vuldb/ssvid-98186