金蝶Apusic 存在任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://blog.csdn.net/qq_36618918/article/details/135111648
• https://nic.sdufe.edu.cn/info/1004/1795.htm
• https://www.apusic.com/view-477-107.html
• https://avd.aliyun.com/detail?id=AVD-2023-1702224
• https://rivers.chaitin.cn/vuldb/0d84fcf9-9361-448e-bfc9-d437bea39146
• https://security.zone.ci/vulns/msec/307853.html
• https://cn-sec.com/archives/2279156.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E9%87%91%E8%9D%B6/%E9%87%91%E8%9D%B6Apusic%E5%BA%94%E7%94%A8%E6%9C%8D%E5%8A%A1%E5%99%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
• https://www.lsgx.com.cn/info/wlaq/9895.html
• https://www.secevery.com/toBugInfo?id=1734758631813058562
• https://cn-sec.com/archives/2253839.html
• https://medium.com/@tvvzvpb186/apusic-server-rce-via-file-upload-and-path-traversal-exploit-confirmed-5b7e1ded3211

Related Vulnerabilities

• PoCkingdee-oa-apusic-server-file-traversal: 金蝶OA Apusic应用服务器(中间件) server_file 目录遍历
• 金蝶应用服务器V10.0 IIOP反序列化远程代码执行漏洞
• 金蝶Apusic应用服务器 /folders 目录遍历漏洞
• 金蝶天燕Apusic AdminService 远程代码执行漏洞
• 金蝶Apusic应用服务器 loadTree JNDI注入漏洞
• 金蝶Apusic应用服务器 createDataSource JNDI 注入漏洞
• Apusic 应用服务器目录遍历漏洞
• 金蝶Apusic Web 管理控制台存在弱口令
• 金蝶Apusic createDataSource JNDI注入漏洞
• 金蝶Apusic应用服务器 未授权目录遍历漏洞
• 金蝶Apusic应用服务器 createDataSource JNDI注入漏洞