Description
金和OA协同办公管理系统C6软件（简称金和OA），金和OA jc6/servlet/Upload接口存在任意文件上传漏洞。
金和OA /jc6/servlet/Upload 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E9%87%91%E5%92%8COA/%E9%87%91%E5%92%8COA_jc6_Upload%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
https://blog.csdn.net/jjjj1029056414/article/details/135614651
https://cn-sec.com/archives/2397548.html
https://www.ddpoc.com/DVB-2023-4954.html