zfsoft-createcafile-rce: 正方软件RCE

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E6%AD%A3%E6%96%B9/%E6%AD%A3%E6%96%B9%E6%95%99%E5%AD%A6%E7%AE%A1%E7%90%86%E4%BF%A1%E6%81%AF%E6%9C%8D%E5%8A%A1%E5%B9%B3%E5%8F%B0ReportServer%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
• https://cn-sec.com/archives/2590503.html
• https://www.cnvd.org.cn/flaw/show/CNVD-2021-14540
• https://github.com/MXWXZ/zfsoft-Hijacking-0day-PoC
• https://github.com/szad670401/zfexp
• https://github.com/admin772/POC
• https://cloud.tencent.com/developer/article/2326775
• https://www.zfsoft.com/

Related Vulnerabilities

• PoC正方教务管理系统 CreateCaFile 任意文件上传漏洞