References https://security.zone.ci/aliyun/ali_nonvd/267121.html https://feei.cn/fve-2013110801/ http://wy.zone.ci/bug_detail.php?wybug_id=wooyun-2015-0124987 https://cn-sec.com/archives/76549.html https://avd.aliyun.com/search?q=cnvd&page=1049 https://security.zone.ci/e/tags/?tagname=boc
Related VulnerabilitiesPoCdify-ssrf-remote-upload: Dify < 1.13.0 - Unauthenticated SSRF via Remote File UploadPoCCVE-2026-28288: Dify User Enumeration via Observable Response DiscrepancyDify /console/api/remote-files/ 服务器端请求伪造漏洞（CVE-2025-56520）Dify存在用户名枚举漏洞(CVE-2025-11750)PoCCVE-2025-56520: Dify v1.6.0 - Server-Side Request ForgeryPoCCVE-2025-63387: Dify v1.9.1 - Broken Access ControlDify存在远程命令执行漏洞Dify /console/api/remote-files/upload 服务器端请求伪造漏洞western-digital-mycloud-multi-uploadify-file-upload: Western Digital MyCloud Multi Uploadify File UploadPoCeoffice-v9-uploadify-fileupload: 泛微 E-Office v9.5 uploadify 任意文件上传漏洞PoCweaver-lazyuploadify-file-upload: OA E-Office LazyUploadify - Arbitrary File UploadPoCweaver-uploadify-file-upload: OA E-Office Uploadify - Arbitrary File Upload