通达OA /gateway/dologin 接口存在远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.ddpoc.com/DVB-2025-9097.html
• https://www.anquanke.com/post/id/201174
• https://github.com/ax1sX/SecurityList/blob/main/Other_OA/%E9%80%9A%E8%BE%BEOA.md
• https://cloud.tencent.com/developer/article/2288066
• https://www.huaweicloud.com/notice/2018/20200819233645120.html
• https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E9%80%9A%E8%BE%BEoa/%E9%80%9A%E8%BE%BEoa%2011.6%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
• https://wxb.fzu.edu.cn/info/1015/1700.htm
• https://qiita.com/shimizukawasaki/items/8f801193b9ffc6e04d2d
• https://stack.chaitin.com/vuldb/detail/8330e92c-d4fd-4d8e-8b79-b03b19f77454
• https://cert.360.cn/warning/detail?id=33cdea70fb8b9ac5d608333f73e85fbe
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E9%80%9A%E8%BE%BEOA-v11.8-getway.php-%E8%BF%9C%E7%A8%8B%E6%96%87%E4%BB%B6%E5%8C%85%E5%90%AB%E6%BC%8F%E6%B4%9E.md
• https://download.xray.cool/vul/453vul.pdf
• https://cloud.tencent.com/developer/article/1602321
• https://www.cnblogs.com/wangfuguiblog/p/13712433.html
• https://blog.csdn.net/weixin_42918771/article/details/107181376
• https://www.cnblogs.com/lidaye1928/p/12527757.html

Related Vulnerabilities

• 通达OA v11.7 delete_cascade.php SQL 注入漏洞
• 通达OA /general/reportshop/utils/upload.php 文件上传漏洞（CNVD-2021-21890）
• 通达OA delete_seal.php SQL 注入漏洞（CVE-2023-4165）
• 通达OA /pda/apps/report/getdata.php 文件上传漏洞
• 通达OA delete_log.php SQL 注入漏洞（CVE-2023-4166）
• tongda-handle-sqli: 通达OA handle SQL注入
• tongda-v11-getdata-rce: 通达OA v11.9 getdata 任意命令执行漏洞
• PoCCVE-2023-4166-2: 通达OA seal_manage SQL 注入