Dolibarr ERP CRM export.php 命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• JeecgBoot 积木报表 /jmreport/auto/export/python/plugin 代码执行漏洞
• 仁和兴业（深圳）软件有限公司仁和云ERPbackupexportall 接口存在任意文件读取漏洞
• PoCCVE-2025-13528: Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export
• PoCCVE-2026-34036: Dolibarr <=22.0.4 - Local File Inclusion
• UniFi Access /api/ucore/backup/export 命令执行漏洞（CVE-2025-52665）
• FOGProject /fog/management/export.php 信息泄露漏洞（CVE-2025-58443）
• PoC迈普无线网络管理系统 /form/exportConfigByHttp 信息泄露漏洞
• Evertz SDVN /v.1.5/php/features/feature-transfer-export.php 命令执行漏洞（CVE-2025-4009）
• PoCCVE-2025-11693: Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure
• PoCredis-exporter-metrics: Redis Exporter Metrics - Exposure
• PoCdownload-monitor-unauth-log-export: Download Monitor < 1.9.7 - Unauthenticated Download Log Export
• 用友 NC /uapws/service/nc.itf.bd.crm.ICurrtypeExportToCrmService XML 外部实体注入漏洞
• 用友 NC /uapws/service/nc.itf.bd.crm.ICustomerExportToCrmService XML 外部实体注入漏洞