Description
泛微E-Office是一款标准化的协同OA办公软件，旨在为企业提供移动化、无纸化、数字化的办公平台。该漏洞存在于文件上传功能中，攻击者可以通过上传特制的PHP文件，执行恶意代码，从而实现远程代码执行，可能导致敏感信息泄露、数据篡改等严重后果。
泛微e-office /general/weibo/javascript/uploadify/uploadify.php 文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E6%B3%9B%E5%BE%AEOA/%E6%B3%9B%E5%BE%AEe-office-uploadify.php%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
http://wooyun.2xss.cc/bug_detail.php?wybug_id=wooyun-2015-0125592
https://www.cnblogs.com/pursue-security/p/17677400.html
https://www.sbr-info.com/fuwu/ld/641.html
https://blog.csdn.net/qq_41904294/article/details/130832416
https://xhnic.cumt.edu.cn/f1/f3/c20548a651763/page.htm
https://avd.aliyun.com/detail?id=AVD-2023-2648
https://download.sangfor.com.cn/a88354b04cff4ea09df46f60dae4592f.pdf