Description
泛微OA 存在远程命令执行漏洞
泛微OA 远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/tzwlhack/Vulnerability/blob/main/%E6%B3%9B%E5%BE%AEOA%20E-cology%20WorkflowServiceXml%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
https://www.cnblogs.com/yyhuni/p/E-cology_CNVD-2019-32204_RCE.html
https://baizesec.github.io/bylibrary/%E6%BC%8F%E6%B4%9E%E5%BA%93/01-CMS%E6%BC%8F%E6%B4%9E/%E6%B3%9B%E5%BE%AE/%E6%B3%9B%E5%BE%AEOA%20Bsh%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://www.anquanke.com/post/id/187110
https://forum.90sec.com/t/topic/564
https://blog.csdn.net/murphysec/article/details/149145578
https://cloud.tencent.com/developer/article/1513865
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E6%B3%9B%E5%BE%AEoa/%E6%B3%9B%E5%BE%AEOA%20E-cology%20%3C%3D9.0%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://www.aliyun.com/product/news/15029
https://rivers.chaitin.cn/blog/cqtf9op0lne6bf932ocg
https://www.linktrust.net/oday/471.html
https://www.sdaxcl.com/yaqfh/shownews.php?id=87
https://nosec.org/m/share/2980.html
https://www.cmdhack.com/archives/131.html
https://www.hackjie.com/docs/3322.html
https://qkl.seebug.org/vuldb/ssvid-98071