Description
通达OA系统/general/vmeet/wbUpload.php文件fileName参数无需登陆getshell
通达OA /vmeet/wbUpload.php 路径存在任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E9%80%9A%E8%BE%BEoa/%E9%80%9A%E8%BE%BEoa%20%E4%BB%BB%E6%84%8F%E2%BD%82%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E/
https://www.cnblogs.com/null1433/p/12767915.html
http://wooyun.2xss.cc/bug_detail.php?wybug_id=wooyun-2013-037642
https://www.ddpoc.com/DVB-2021-1558.html
https://blog.csdn.net/weixin_33330762/article/details/115644898
https://disk.scan.cm/All_wiki/yougar0.github.io%28%E5%9F%BA%E4%BA%8E%E9%9B%B6%E7%BB%84%E5%85%AC%E5%BC%80%E6%BC%8F%E6%B4%9E%E5%BA%93%20%2B%20PeiQi%E6%96%87%E5%BA%93%E7%9A%84%E4%B8%80%E4%BA%9B%E6%BC%8F%E6%B4%9E%29-20210715/Web%E5%AE%89%E5%85%A8/%E9%80%9A%E8%BE%BEoa/%E9%80%9A%E8%BE%BEoa%20%E4%BB%BB%E6%84%8F%E2%BD%82%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://www.getmonero.us/down/www.0-sec.org/0day/%E9%80%9A%E8%BE%BEoa/11.html