Description
泛微E-Cology存在文件上传漏洞，攻击者可以通过该漏洞上传恶意脚本文件到服务器中，通过访问该恶意文件从而执行文件中的恶意代码，进而获取系统权限。
泛微E-Cology ktreeuploadaction 文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E6%B3%9B%E5%BE%AEOA-E-cology-KtreeUploadAction-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
https://cn-sec.com/archives/2989100.html
https://rivers.chaitin.cn/blog/cqli76h0lnec5jjug6hg
https://ddpoc.com/DVB-2025-9098.html
https://avd.aliyun.com/detail?id=AVD-2022-1360864
https://blog.csdn.net/maverickpig/article/details/117290372