Description
金和 /c6/Jhsoft.Web.Project/ProjectOffice/ProjectScheduleDelete.aspx 存在 XML 外部实体注入漏洞，攻击者可以通过构造恶意的 XML 请求来利用该漏洞。
金和OA-C6 /c6/Jhsoft.Web.Project/ProjectOffice/ProjectScheduleDelete.aspx XML 外部实体注入漏洞 （CVE-2025-7823）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-7823
https://www.cve.org/CVERecord?id=CVE-2025-7823
https://github.com/advisories/GHSA-7hcv-42fj-r6vq
https://vuldb.com/?id.316924
https://www.cvedetails.com/cve/CVE-2025-7823/
https://www.xtcaq.com/nd.jsp?id=9446
https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11_v2