蓝凌EKP Vulnerabilities
84 vulnerabilities related to 蓝凌EKP
- 2025-12-12蓝凌EKP /third/im/kk/webparts/getGzhInfo.jsp 服务器端请求伪造漏洞
- 2025-12-12蓝凌EKP /third/im/kk/webparts/getGzhInfo.jsp 服务器端请求伪造漏洞
- 2025-09-11蓝凌OA erp_data.jsp存在远程命令执行漏洞
- 2025-09-11蓝凌OA sysUiExtend.do 存在任意文件上传漏洞
- PoC2025-08-01landray-dataxml-jsp-rce: 蓝凌OA dataxml.jsp 远程命令执行漏洞
- PoC2025-08-01landray-ekp-sysFormMainDataInsystemWebservice-fileread: Landray EKP sysFormMainDataInsystemWebservice File Read
- PoC2025-08-01landray-oa-datajson-rce: Landray OA Datajson RCE
- PoC2025-08-01landray-oa-kmImeetingBookWebService-fileread: Landray OA kmImeetingBookWebService File Read
- PoC2025-08-01landray-oa-kmImeetingResWebService-fileread: Landray OA kmImeetingResWebService File Read
- PoC2025-08-01landray-oa-loginWebserviceService-fileread: Landray OA loginWebserviceService File Read
- PoC2025-08-01landray-oa-sysNotifyTodoWebService-fileread: Landray OA sysNotifyTodoWebService File Read
- PoC2025-08-01landray-oa-sysNotifyTodoWebServiceEkpj-fileread: Landray OA sysNotifyTodoWebServiceEkpj File Read
- PoC2025-08-01landray-oa-syssearchmain-rce: Landray sysSearchMain.do RCE
- PoC2025-08-01landray-oa-sysSynchroGetOrgWebService-fileread: Landray OA sysSynchroGetOrgWebService File Read
- PoC2025-08-01landray-oa-sysTagWebService-fileread: Landray OA sysTagWebService File Read
- PoC2025-08-01landray-oa-sysuicomponent-fileupload: 蓝凌 OA 子部件文件上传
- PoC2025-08-01landray-oa-thirdImSyncForKKWebService-fileread: Landray OA thirdImSyncForKKWebService File Read
- PoC2025-08-01landray-oa-treexml-rce: Landray OA treexml.tmpl script 远程代码执行漏洞
- PoC2025-08-01landray-oa-wechatWebserviceService-fileread: Landray OA wechatWebserviceService File Read
- PoC2025-08-01landray-wechat-loginhelper-sqli: 蓝凌OA wechatLoginHelper存在SQL注入
- PoC2025-08-01landray-oa-replaceextend-rce: Landray OA replaceExtend Function - Remote Code Execution
- PoC2025-08-01landray-oa-sysSearchMain-editParam-rce: Landray-OA - Remote code Execution
- PoC2025-08-01landray-oa-treexml-rce: Landray OA Treexml.tmpl - Remote Code Execution
- PoC2025-08-01landray-oa-datajson-rce: Landray OA Datajson S Bean - Remote Code Execution
- PoC2025-08-01landray-oa-erp-data-rce: Landray-OA - Remote Code Execution
- PoC2025-08-01landray-syszonepersoninfo-disclosure: 蓝凌OA sysZonePersonInfo 敏感信息泄露
- PoC2025-08-01landray-oa-panel: Landray OA Panel Login
- 2025-01-02蓝凌OA lbpmFlowLogGetWebService 任意文件读取漏洞
- 2025-01-02蓝凌OA fsscCtripBusinessOrderWebService 任意文件读取漏洞
- 2024-12-31蓝凌OA wechatWebserviceService 任意文件读取漏洞
- 2024-12-31蓝凌OA yworkWebserviceService 任意文件读取漏洞
- 2024-12-31蓝凌OA sysNotifyTodoWebService 任意文件读取漏洞
- 2024-12-26蓝凌OA kmsMultidocMaintainCategoryWSService 任意文件读取漏洞
- 2024-12-26蓝凌OA kmReviewWebserviceService 任意文件读取漏洞
- 2024-12-26蓝凌OA kmCalendarWebserviceService 任意文件读取漏洞
- 2024-12-26蓝凌OA kmsMaintainLogWSService 任意文件读取漏洞
- 2024-12-26蓝凌OA kmsWikiSearchCategoryWSService 任意文件读取漏洞
- 2024-12-26蓝凌OA eopBasedataSupplierWebserviceService 任意文件读取漏洞
- 2024-12-23蓝凌EKP系统多个接口存在任意文件读取漏洞
- 2024-12-22蓝凌EKP系统接口sysNotifyTodoWebService存在任意文件读取漏洞
- 2024-12-22蓝凌EKP系统接口kmImeetingResWebService存在任意文件读取漏洞
- 2024-12-21蓝凌EKP系统 thirdImSyncForKKWebService存在任意文件读取漏洞
- 2024-12-21蓝凌EKP系统接口sysTagWebService存在任意文件读取漏洞
- PoC2024-12-16蓝凌OA thirdImSyncForKKWebService 任意文件读取漏洞
- PoC2024-12-13蓝凌OA loginWebserviceService 任意文件读取漏洞
- 2024-11-19蓝凌OA弱口令漏洞
- PoC2024-11-07蓝凌OA fsscCommonPortlet 未授权SQL注入漏洞
- PoC2024-10-30蓝凌OA hrstaffwebservice 任意文件读取漏洞
- 2024-10-08蓝凌OA getGzhInfo.jsp SSRF漏洞
- 2024-09-29蓝凌OA权限绕过漏洞
- 2024-08-13蓝凌OA webservice 任意文件读取漏洞
- 2024-08-07蓝凌 EKP dataxml.tmpl存在代码执行漏洞
- 2024-07-25蓝凌OA SysZonePersonInfo 信息泄露漏洞
- 2024-07-19蓝凌OA dataxml.jsp 前台绕过RCE漏洞
- 2024-07-18蓝凌EKP 文件copy导致远程代码执行漏洞
- 2024-04-23蓝凌OA /admin.do 后台存在 JNDI 远程命令执行漏洞
- 2024-04-23蓝凌OA 存在任意文件读取漏洞
- 2024-04-23蓝凌OA outToken 存在鉴权绕过漏洞
- 2024-03-05蓝凌OA 后台任意文件上传漏洞
- 2024-02-27蓝凌OA kmImeetingRes sql注入漏洞
- 2024-02-07蓝凌OA UploadPic.aspx 任意文件上传漏洞
- 2023-12-22蓝凌OA /sysZonePersonInfo.do 路径存在敏感信息泄露
- 2023-12-15蓝凌OA /kmImeetingRes.do 后台路径存在SQL注入漏洞
- 2023-11-29蓝凌OA syszonepersoninfo 信息泄露
- 2023-11-17蓝凌OA sysUiComponent 任意文件上传漏洞
- 2023-10-24蓝凌OA /getLoginSessionId.html 路径存在敏感信息泄露
- 2023-09-01蓝凌OA WechatLoginHelper 存在SQL注入漏洞
- 2023-08-23蓝凌OA /ui-ext/ 匿名路径存在未授权访问漏洞
- 2023-08-22蓝凌OA 金格组件 /jg_service.jsp 路径存在任意文件写入
- 2023-08-21蓝凌OA /sysUIComponent.do 路径存在任意文件上传漏洞
- 2023-08-11蓝凌OA /sysUiExtend.do 路径存在任意文件上传漏洞
- 2023-06-06蓝凌OA jg_service.jsp 任意文件上传
- 2023-06-06蓝凌OA getLoginSessionId.html 后台登录绕过
- 2023-04-12蓝凌OA /erp_data.jsp 文件存在远程代码执行漏洞
- PoC2023-01-06蓝凌OA /dataxml.jsp 路径 sysFormulaValidate 存在远程代码执行漏洞
- 2022-09-09蓝凌OA /datajson.js 路径 sysFormulaSimulateByJS 存在远程代码执行漏洞
- 2022-08-06蓝凌OA datajson.js远程命令执行漏洞
- 2022-08-02蓝凌OA 任意文件读取漏洞(CVE-2022-34924)
- 2022-08-01蓝凌OA /treexml.tmpl 路径 ruleFormulaValidate 存在远程代码执行漏洞
- 2022-07-07蓝凌OA 远程命令执行漏洞
- 2022-04-26蓝凌OA sysSearchMain.do 存在XMLDecode 反序列化漏洞
- 2021-07-01蓝凌OA XMLDecoder反序列化漏洞
- 2021-05-19蓝凌OA custom.jsp 任意文件读取漏洞
- 2021-05-10蓝凌OA custom.jsp任意文件读取漏洞