时空智友企业流程化管控系统 /formservice updater.uploadStudioFile 任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E4%BA%91%E6%97%B6%E7%A9%BA/%E6%97%B6%E7%A9%BA%E6%99%BA%E5%8F%8BERP%E7%B3%BB%E7%BB%9Fupdater.uploadStudioFile%E6%8E%A5%E5%8F%A3%E5%A4%84%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://blog.csdn.net/m0_46381222/article/details/143319717
• https://cn-sec.com/archives/3307480.html
• https://zhuanlan.zhihu.com/p/657691422
• https://blog.csdn.net/nnn2188185/article/details/133150748
• https://cn-sec.com/archives/2901511.html
• https://blog.csdn.net/nnn2188185/article/details/143196035
• https://cn-sec.com/archives/3327860.html
• https://www.ddpoc.com/DVB-2024-7345.html
• https://github.com/wudijun/skzy

Related Vulnerabilities

• 时空智友ERP系统 /formservice updater.uploadStudioFile 文件上传漏洞
• 时空智友企业流程化管控系统 /formservice indexService.notice SQL 注入漏洞
• 时空智友ERP /formservice richclient.initRCForm XML 外部实体注入漏洞（CVE-2026-1218）
• 时空智友ERP /formservice/wf XML 外部实体注入漏洞
• PoCCVE-2010-1307: Joomla! Component Magic Updater - Local File Inclusion
• PoCCVE-2017-18565: Updater by BestWebSoft < 1.35 - Cross-Site Scripting
• PoCshikongzhiyou-formservice-upload-file: 时空智友企业流程化管控系统 任意文件上传漏洞
• PoCshikongzhiyou-richclient.openform-xxe: 时空智友企业流程化管控系统 XML 外部实体注入漏洞
• 时空智友企业流程化管控系统 richclient.openForm XML外部实体注入漏洞
• 时空智友企业信息管理系统 /formservice XML 外部实体注入漏洞