Landray-OA 漏洞列表

Landray OA System kmImeetingResWebService interface has an arbitrary file read vulnerability. The vulnerability exists in the getKmimeetingResById method which can be exploited to read arbitrary files on the system. FOFA: body="Com_Parameter"

介绍:该系统 sysUiComponent 文件存在任意文件上传漏洞，通过此漏洞攻击者可上传webshell木马，远程控制服务器，威胁企业数据安全。 Fofa: app="Landray-OA系统" ZoomEye: app:"蓝凌数字OA"

Landray OA System wechatWebserviceService interface has an arbitrary file read vulnerability. The vulnerability exists in the getAttachement method which can be exploited to read arbitrary files on the system. FOFA: body="Com_Parameter"

Landray-OA is susceptible to local file inclusion.

Landray-OA through sysSearchMain editParam is vulnerable to Remote Code Execution.

Landray-OA `erp_data.jsp` is vulnerable to remote code execution vulnerability.