若依管理系统 后台定时任务 远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://blog.csdn.net/uuzeray/article/details/154737556
• https://zhuanlan.zhihu.com/p/25211039925
• https://www.ihonker.com/thread-33318-1-1.html
• https://cloud.tencent.com/developer/article/2472305
• https://www.cnblogs.com/backlion/p/18896463
• https://github.com/ax1sX/SecurityList/blob/main/Java_OA/RuoYi.md
• https://gitee.com/y_project/RuoYi-Vue/issues/I4NBQO
• https://www.hzktester.top/posts/78dc113a.html
• https://cn-sec.com/archives/3932360.html
• https://eddiemurphy89.github.io/2024/08/08/Ruoyi-v4-7-8-RCE%E5%88%86%E6%9E%90/
• https://doc.ruoyi.vip/ruoyi/document/kslj.html
• https://github.com/yangzongzhuan/RuoYi/issues/318
• https://blog.csdn.net/weixin_42628854/article/details/134037984
• https://blog.play2win.top/2021/09/04/%E8%8B%A5%E4%BE%9D%E5%8F%8D%E5%BA%8F%E5%88%97%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0%E5%8F%8A%E5%85%B6%E4%BF%AE%E5%A4%8D%E7%BB%95%E8%BF%87/
• https://cloud.tencent.com/developer/article/2399994
• https://whoopsunix.com/docs/components/ruoyicorntabRCE/
• https://github.com/binganao/Ruoyi-All
• https://xsx.tw/hack/4055/
• https://github.com/MD-SEC/RuoYi_Rce_Exp

Related Vulnerabilities

• 若依管理系统 /monitor/cache/getNames 命令执行漏洞
• 若依管理系统任意文件下载漏洞
• 若依管理系统 弱口令漏洞