蓝凌OA sysUiComponent 任意文件上传漏洞

2023-11-17 蓝凌EKP PoC No

Description

蓝凌OA sysUiComponent接口处存在任意文件上传漏洞,未经过身份认证的攻击者可通过构造压缩文件上传恶意后门文件,远程命令执行,获取服务器权限

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities