红帆OA iorepsavexml 任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/zan8in/pocwiki/blob/main/%E7%BA%A2%E5%B8%86OA_iorepsavexml.aspx_%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://cn-sec.com/archives/2318618.html
• https://blog.csdn.net/jjjj1029056414/article/details/135182517
• https://www.ddpoc.com/DVB-2023-5349.html
• https://blog.csdn.net/2401_83974370/article/details/137747979
• https://cn-sec.com/archives/2276969.html
• http://www.aqtd.com/nd.jsp?fromColId=-1&id=5537&_ngc=-1
• https://zhuanlan.zhihu.com/p/1932214870562047555
• https://gitea.com/Run0nceEx/POC
• https://get-shell.com/1202.html

Related Vulnerabilities

• 红帆OA WebServiceForWeixin.asmx 存在敏感信息泄露
• 红帆OA /ioffice/prg/Mobile/Base/MobileBind.aspx SQL 注入漏洞
• PoChongfan-oa-iorepsavexml-file-upload: 红帆OA iorepsavexml.aspx 任意文件上传
• PoCioffice-oa-udfmr-asmx-sql-inject: 红帆OA udfmr.asmx SQL注入漏洞
• PoC红帆OA NetCAUserLogin.aspx 存在SQL注入漏洞
• PoC红帆OA MobileOAEmailAddress SQL注入漏洞
• 红帆OA /website/config/pc-app-config.js 信息泄露漏洞
• 红帆OA list接口 SQL注入
• 红帆OA docid SQL注入漏洞
• 红帆OA jssrmyysql SQL注入漏洞
• 红帆OA CAWS.asmx SQL注入漏洞
• 红帆 ioffice iorepsavexml.aspx 文件上传