References https://cn-sec.com/archives/1958325.html https://github.com/ax1sX/SecurityList/blob/main/Server/TongWeb.md http://cn-sec.com/archives/tag/tongweb https://ask.csdn.net/questions/8987356 https://le1a.github.io/ https://cn-sec.com/archives/4959227.html http://www.bmth666.cn/index.html https://github.com/chainreactors/picker/issues/1132 https://unsafe.sh/go-119645.html
Related Vulnerabilities东方通 TongWeb /ejbserver/ejb 代码执行漏洞东方通 TongWeb EJB 未授权 反序列化漏洞PoCTongweb rjcs接口存在反序列化漏洞TongWeb /snapshots/download 任意文件下载漏洞TongWeb nameCheck JNDI注入漏洞TongWeb jqueryFileTree 目录遍历漏洞TongWeb 任意文件删除漏洞TongWeb sysweb 弱口令漏洞东方通TongWeb console/rest/startupconfig/save 远程命令执行漏洞东方通TongWeb 存在远程命令执行漏洞东方通TongWeb 管理控制台存在命令执行漏洞