References https://cn-sec.com/archives/2437218.html https://www.ddpoc.com/DVB-2024-7704.html https://www.cnblogs.com/cwkiller/p/18957050 https://www.lmboke.com/archives/lan-ling-oalou-dong-li-yong-zong-jie https://github.com/dk47os3r/Landray-OA-RCE https://cn-sec.com/archives/2202219.html
Related Vulnerabilities蓝凌EKP /third/im/kk/webparts/getGzhInfo.jsp 服务器端请求伪造漏洞蓝凌OA erp_data.jsp存在远程命令执行漏洞蓝凌OA sysUiExtend.do 存在任意文件上传漏洞PoClandray-dataxml-jsp-rce: 蓝凌OA dataxml.jsp 远程命令执行漏洞PoClandray-ekp-sysFormMainDataInsystemWebservice-fileread: Landray EKP sysFormMainDataInsystemWebservice File ReadPoClandray-oa-datajson-rce: Landray OA Datajson RCEPoClandray-oa-kmImeetingBookWebService-fileread: Landray OA kmImeetingBookWebService File ReadPoClandray-oa-kmImeetingResWebService-fileread: Landray OA kmImeetingResWebService File ReadPoClandray-oa-loginWebserviceService-fileread: Landray OA loginWebserviceService File ReadPoClandray-oa-sysNotifyTodoWebService-fileread: Landray OA sysNotifyTodoWebService File ReadPoClandray-oa-sysNotifyTodoWebServiceEkpj-fileread: Landray OA sysNotifyTodoWebServiceEkpj File ReadPoClandray-oa-syssearchmain-rce: Landray sysSearchMain.do RCE