Description
泛微E-Office 10存在远程代码执行漏洞，此漏洞是程序对用户上传到atuh-file接口的文件数据缺乏校验导致的。
泛微 E-Office 10 Phar文件远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/adysec/POC/blob/main/wpoc/%E6%B3%9B%E5%BE%AEOA/%E6%B3%9B%E5%BE%AEE-Office10%E7%89%88%E6%9C%AC%E5%B0%8F%E4%BA%8Ev10.0_20240222%E5%AD%98%E5%9C%A8%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
https://rivers.chaitin.cn/blog/cq9412h0lnechd242lpg
https://blog.csdn.net/weixin_42353842/article/details/137151780
https://netc.shcmusic.edu.cn/2024/0329/c1811a50607/pagem.htm
https://www.ctfiot.com/140787.html
https://www.hnitns.com/index.php?id=214
https://zhuanlan.zhihu.com/p/691331028
https://it.nwpu.edu.cn/info/1023/1715.htm
https://peiqif4ck.github.io/penetrationtest/2024/03/articles/b8f9d080e95e9930/
https://swjtuhc.cn/m/html/xxhywlgl/detail/303632
https://www.sdaxcl.com/yaqfh/shownews.php?id=87
https://wlaq.njupt.edu.cn/2024/0329/c14800a258600/page.htm