用友GRP-U8 FileUpload 任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BGRP-U8-FileUpload%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
• https://www.cnblogs.com/pursue-security/p/17685037.html
• https://blog.csdn.net/qq_36618918/article/details/135199281
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E7%94%A8%E5%8F%8B-GRP-U8-UploadFileData-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://vulners.com/seebug/SSV:90890
• https://blog.csdn.net/m0_73334898/article/details/142771417
• https://www.ddpoc.com/DVB-2021-1959.html
• https://gitea.com/Run0nceEx/POC
• https://cn-sec.com/archives/1859527.html
• https://cloud.baidu.com/article/2773426
• https://github.com/Co5mos/nuclei-tps/blob/main/http/vulnerabilities/yonyou/yonyou-u8-UploadFileData-fileupload.yaml

Related Vulnerabilities

• 用友GRP-U8Cloud /jmreport/loadTableData SQL 注入漏洞
• 用友 GRP-U8Cloud /jmreport/queryFieldBySql Freemarker 命令执行漏洞
• 关于用友GRP-U8Cloud产品getBudgetReleaseProjectList及U8AppProxy及fbpm-modeler存在命令执行漏洞的安全通告
• 关于用友GRP-U8Cloud产品(api/xx/xxx)存在前台sql注入导致命令执行漏洞的安全通告
• 关于用友GRP-U8Cloud产品存在前台无条件远程命令执行漏洞的安全通告
• 关于用友GRP-U8Cloud产品(yrule/xxx)接口存在命令执行漏洞的安全通告
• 关于用友GRP-U8Cloud产品jmreport组件模块存漏洞的安全通告
• 关于用友GRP-U8Cloud产品(XXX/getDataTypeList及XXX/getFAInfo)接口存在SQL注入漏洞的安全公告
• 东胜物流软件 /Account/Chfee_payapplication/FileUpload 文件上传漏洞
• 锐明技术Crocus系统 DeviceFileUpload.do 文件读取漏洞
• 锐明技术 Crocus系统 DeviceFileUpload.do 任意文件读取漏洞