亿赛通电子文档安全管理系统 CDGAuthoriseTempletService1 接口远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E4%BA%BF%E8%B5%9B%E9%80%9A%E7%94%B5%E5%AD%90%E6%96%87%E6%A1%A3%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F/%E4%BA%BF%E8%B5%9B%E9%80%9A%E7%94%B5%E5%AD%90%E6%96%87%E6%A1%A3%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9FdocRenewApp%E5%AD%98%E5%9C%A8%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E.md
• https://y4tacker.github.io/2023/12/13/year/2023/12/%E4%BA%BF%E8%B5%9B%E9%80%9A%E7%94%B5%E5%AD%90%E6%96%87%E6%A1%A3%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%E6%B5%85%E6%9E%90/
• https://stack.chaitin.com/vuldb/detail/49323d29-68eb-4fe9-ba5a-b8eb13345de0
• https://www.cnblogs.com/fuchangjiang/p/17718553.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E4%BA%BF%E8%B5%9B%E9%80%9A%E7%94%B5%E5%AD%90%E6%96%87%E6%A1%A3%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F/%E4%BA%BF%E8%B5%9B%E9%80%9A%E7%94%B5%E5%AD%90%E6%96%87%E6%A1%A3%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9FCDGAuthoriseTempletService1%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E(XVE-2024-19611).md
• https://x.threatbook.com/v5/article?threatInfoID=98700
• https://www.ddpoc.com/DVB-2024-5852.html
• https://blog.csdn.net/2401_84904969/article/details/138756246
• https://gitea.com/Run0nceEx/POC
• https://www.esafenet.com/
• https://bbs.decoyit.com/thread-773-1-1.html
• https://peiqif4ck.github.io/codeaudit/2023/09/articles/2d6e04e436b4b308/
• https://www.cnblogs.com/fuchangjiang/p/17718515.html
• https://cn-sec.com/archives/2504724.html
• https://security.zone.ci/vulns/msec/307817.html
• https://github.com/zan8in/pocwiki/blob/main/%E4%BA%BF%E8%B5%9B%E9%80%9A%E7%94%B5%E5%AD%90%E6%96%87%E6%A1%A3%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
• https://gobysec.net/goExp
• https://ti.qianxin.com/vulnerability/notice-list
• https://0xf4n9x.github.io/cdg-xstream-deserialization-arbitrary-file-upload.html
• https://stack.chaitin.com/vuldb/detail/3dfa0e31-2b8f-4f50-941f-c8a68fc96493
• https://www.cnblogs.com/fuchangjiang/p/17718497.html
• https://ddpoc.com/
• https://www.secevery.com/toBugInfo?id=1759781539190845441
• https://cn-sec.com/archives/3064948.html
• https://starmap.dbappsecurity.com.cn/info/6774
• https://zhuanlan.zhihu.com/p/651945065
• https://zhuanlan.zhihu.com/p/1932214870562047555
• https://www.scribd.com/document/870380103/2025-Attack-Defense-Vulnerability-List
• https://blog.csdn.net/weixin_48539059/category_12739731.html
• https://get-shell.com/3601.html
• https://www.secevery.com/toBugInfo?id=1759781539190845441

Related Vulnerabilities

• 亿赛通电子文档安全管理系统 /CDGServer3/js/../SaveCDGPermissionFromGFOA SQL 注入漏洞
• 亿赛通电子文档安全管理系统 /CDGServer3/NetSecConfigAjax;Service SQL 注入漏洞
• 亿赛通电子文档安全管理系统 /CDGServer3/dwr/call/plaincall/JLockSeniorDao.findByLockName.dwr SQL 注入漏洞
• 亿赛通电子文档安全管理系统 /CDGServer3/NoticeAjax;Service SQL 注入漏洞
• 亿赛通电子文档安全管理系统 /CDGServer3/logManagement/LogDownLoadService SQL 注入漏洞
• 亿赛通电子文档安全管理系统 /CDGServer3/3g/WorkFlowAction;Servicelogin SQL 注入漏洞
• 亿赛通电子文档安全管理系统 HookWhiteListservice SQL注入漏洞