金蝶EAS 存在远程命令执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E9%87%91%E8%9D%B6/%E9%87%91%E8%9D%B6EAS%E5%AD%98%E5%9C%A8appUtil.jsp%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
• https://qkl.seebug.org/vuldb/ssvid-90376
• http://wooyun.2xss.cc/bug_detail.php?wybug_id=wooyun-2013-033331
• https://qkl.seebug.org/vuldb/ssvid-93773
• https://cn-sec.com/archives/2125788.html
• https://stack.chaitin.com/vuldb/detail/b9f49bb0-9b2f-40eb-921e-2f822b1bc8cd
• https://www.cnblogs.com/spmonkey/p/17843406.html
• https://cn-sec.com/archives/3240168.html
• https://security.zone.ci/aliyun/ali_nonvd/246326.html
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E9%87%91%E8%9D%B6OA-EAS%E7%B3%BB%E7%BB%9F-uploadLogo.action-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md

Related Vulnerabilities

• 金蝶EAS /ormrpc/services/BSHService 代码执行漏洞
• PoC金蝶 EAS /easweb/cp/dm/pdfViewLocal.jsp 文件读取漏洞
• PoCjindie-eas-autologin-rce: 金蝶 EAS Cloud autoLogin.jsp 远程代码执行漏洞
• PoC金蝶EAS /easportal/autoLogin.jsp 代码执行漏洞
• 金蝶-EAS-Cloud 弱口令漏洞
• PoC金蝶EAS HandleKinggridServlet 任意文件上传漏洞
• 金蝶EAS 任意文件上传漏洞
• 金蝶EAS /pdfViewLocal.jsp 文件读取漏洞
• PoC金蝶 EAS HandleKinggridServlet 存在任意文件上传漏洞
• 金蝶-EAS easWebClient 任意文件下载漏洞
• 金蝶 EAS pdfviewlocal 任意文件读取漏洞