References https://mrxn.net/jswz/trwfe-mergeQuery-rce.html https://cn-sec.com/archives/4901766.html https://mrxn.net/jswz/trwfe-mergeQuery-rce.html https://mrxn.net/tag/rce/page/2 https://cn-sec.com/archives/tag/%E5%A4%A9%E9%94%90%E7%BB%BF%E7%9B%BE
Related VulnerabilitiesPoCvlife-fastjson-rce: Vlife FastJSON - Remote Code Execution天锐绿盾审批系统 /trwfe/login.jsp/.%2e/rest/ext/fileServer 信息泄露漏洞PoC天锐绿盾审批系统 /trwfe/login.jsp/../rest/ext/app/fileopen/record 代码执行漏洞天锐绿盾审批系统 /trwfe/login.jsp/.%2e/config/findAuditors.do 信息泄露漏洞天锐绿盾审批系统 /trwfe/login.jsp/.%2e/config/statWxApiRecord.do 信息泄露漏洞天锐绿盾审批系统 /trwfe/login.jsp/.%2e/config/getConfigValues.do 信息泄露漏洞天锐绿盾审批系统 /trwfe/login.jsp/.%2e/rest/ext/template 命令执行漏洞PoC天锐绿盾审批系统 /trwfe/login.jsp/.%2e/rest/ext/mergeQuery 命令执行漏洞天锐绿盾审批系统 tdSysFindDepartmentTree.do 信息泄露漏洞天锐绿盾审批系统 findOnlineUserForPage.do 信息泄露漏洞天锐绿盾审批系统 fileServer 信息泄露漏洞天锐绿盾审批系统 findAllDept.do 信息泄露漏洞