Description
泛微OA9通过 /page/exportImport/uploadOperation.jsp 进行前台任意文件上传。
泛微OA Ecology9 uploaderOperate.jsp 前台任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/YinWC/2021hvv_vul/blob/master/0408/%E6%B3%9B%E5%BE%AEOA9%E5%89%8D%E5%8F%B0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
https://www.hackjie.com/docs/3325.html
https://hackeyes.github.io/2021/04/15/%E6%B3%9B%E5%BE%AE0A9%E5%89%8D%E5%8F%B0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0/
https://jeva.cc/2872.html
https://bbs.decoyit.com/thread-217-1-1.html
https://cn-sec.com/archives/2144326.html
https://download.xray.cool/vul/453vul.pdf
https://rivers.chaitin.cn/blog/cq70jnqp1rhtmlvvdq10