Description
金和 /c6/JHSoft.Web.DailyTaskManage/XmlHttp.aspx 存在 XML 外部实体注入漏洞，攻击者可以通过构造恶意的 XML 请求来利用该漏洞。
金和OA-C6 /c6/JHSoft.Web.DailyTaskManage/XmlHttp.aspx XML 外部实体注入漏洞 （CVE-2025-7824）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-7824
https://www.cve.org/CVERecord?id=CVE-2025-7824
https://vuldb.com/vuln/316925
https://dbugs.ptsecurity.com/vulnerability/PT-2025-30138
https://cert.kenet.or.ke/cve-2025-7824-jinher-oa-xml-external-entity-reference-xxe-vulnerability
https://github.com/cc2024k/CVE/issues/2
https://devhub.checkmarx.com/cve-details/cve-2025-7824/
https://www.incibe.es/index.php/en/incibe-cert/early-warning/vulnerabilities/cve-2025-7824
https://vulners.com/circl/CIRCL:CVE-2025-7824