用友 畅捷通T+ GetRecordAll 敏感信息泄露漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.ufida168.com/case_detail/4378.html
• https://cn-sec.com/archives/2634358.html
• https://www.ufida168.com/News_1/p-3024-8.html
• https://www.cnblogs.com/0day-li/p/19007070
• https://stack.chaitin.com/poc/detail/4229
• https://cn-sec.com/archives/4218801.html
• https://www.ufida168.com/case_detail/4379.html

Related Vulnerabilities

• PoCyonyou-chanjet-tplus-password-reset: 用友 畅捷通T+ RecoverPassword.aspx 管理员密码修改漏洞
• PoCyonyou-chanjet-tplus-read-file: 用友 畅捷通T+ DownloadProxy.aspx 任意文件读取漏洞
• 关于畅捷通T+GetRecordAll接口存在敏感信息泄露漏洞的安全通告
• 用友 畅捷通T+ /getdecallusers 信息泄露漏洞