OfficeWeb365 furl 任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/OfficeWeb365-SaveDraw-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://cn-sec.com/archives/3458220.html
• https://cn-sec.com/archives/2105313.html
• https://github.com/luck-ying/Library-POC/blob/master/2023HW/2023.8.15/OfficeWeb365_SaveDraw%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.py
• https://stack.chaitin.com/vuldb/detail/1471719b-a3b5-4008-901a-02e9110b5c92
• https://github.com/adminlove520/pocWiki/blob/main/OfficeWeb365%20%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://github.com/yujiangxian/pocwiki/blob/main/OfficeWeb365/OfficeWeb365SaveDraw%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://openeuler.csdn.net/69eee94d54b52172bc703c8a.html
• https://github.com/xuetang1125/OfficeWeb365/blob/main/OfficeWeb365_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E%20.md
• https://www.cnblogs.com/mt0u/p/17945786

Related Vulnerabilities

• PoCoffice365-indexs-fileread: officeWeb365 Indexs接口存在任意文件读取
• PoCofficeweb365-savedraw-fileupload: OfficeWeb365 SaveDraw 任意文件上传漏洞
• PoCCVE-2024-37728: OfficeWeb365 Indexs Interface - Arbitrary File Read
• officeweb365存在弱口令漏洞
• OfficeWeb365 控制台弱口令漏洞
• OfficeWeb365 Pic路径存在任意文件读取漏洞
• OfficeWeb365存在任意文件读取漏洞
• OfficeWeb365 SSRF漏洞
• OfficeWeb365 SaveDraw 文件上传漏洞
• OfficeWeb365 /PW/SaveDraw 任意文件上传漏洞