References https://github.com/adysec/POC/blob/main/wpoc/%E8%87%B4%E8%BF%9COA/%E8%87%B4%E8%BF%9COA_getAjaxDataServlet%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8%E4%BB%BBXXE%E6%BC%8F%E6%B4%9E.md https://comate.baidu.com/zh/page/7o4cyt2gc3s https://stack.chaitin.com/vuldb/detail/7f886a87-6401-4548-838c-eea75332b9e9 https://www.ctfiot.com/139286.html https://cn-sec.com/archives/2380386.html https://avd.aliyun.com/detail?id=AVD-2023-1686709 https://www.zovps.com/article/index.php/post/132833.html https://github.com/Co5mos/nuclei-tps/blob/main/http/vulnerabilities/seeyon/seeyon-oa-getAjaxDataServlet-xxe.yaml https://security.zone.ci/aliyun/ali_highrisk/10783.html https://zhuanlan.zhihu.com/p/662173351 https://www.ddpoc.com/DVB-2023-4431.html
Related Vulnerabilities致远 OA /seeyon/officeservlet 信息泄露漏洞PoC致远OA /seeyon/rest/m3/common/system/properties 信息泄露漏洞seeyon-wooyun-2015-0108235-sqli: seeyon wooyun 2015 0108235 sqliseeyon-wooyun-2015-148227: Seeyon WooYun LFRPoCseeyon-a8-management-monitor-default-password: A8 Management Monitor Default PasswordPoCseeyon-oa-cookie-leak-login-bypass: Seeyon OA Cookie LeakagePoCseeyon-session-leak: Seeyon session leakagePoCseeyon-a6-config-disclosure: 致远OA A6 config.jsp 敏感信息泄漏漏洞PoCseeyon-a6-createmysql-disclosure: 致远OA A6 createMysql.jsp 数据库敏感信息泄露PoCseeyon-a6-setextno-sql-inject: 致远OA A6 setextno.jsp SQL注入漏洞PoCseeyon-ajax-unauthorized-access: seeyon ajax 未经授权访问PoCseeyon-fanruan-report-server-directory-travesal: 致远OA 帆软组件 ReportServer 目录遍历漏洞PoCseeyon-m1-usertokenservice-rce: 致远OA M1 server 反序列化命令执行漏洞