Awesome-POC

images

update

2025-03-03 09:57:24 +08:00

O2OA 9.0.3 版本 scriptingBlockedClasses 绕过导致远程代码执行.md

update

2025-03-03 09:57:24 +08:00

O2OA invoke 后台远程命令执行漏洞 CNVD-2020-18740.md

update

2025-03-03 09:57:24 +08:00

O2OA open 后台任意文件读取漏洞.md

update

2025-03-03 09:57:24 +08:00

一米OA getfile.jsp 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00

万户OA DocumentEdit.jsp SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

万户OA download_ftp.jsp 任意文件下载漏洞.md

update

2024-11-06 14:10:36 +08:00

万户OA download_old.jsp 任意文件下载漏洞.md

update

2024-11-06 14:10:36 +08:00

万户OA downloadhttp.jsp 任意文件下载漏洞.md

update

2024-11-06 14:10:36 +08:00

万户OA DownloadServlet 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00

万户OA fileUpload.controller 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

万户OA OfficeServer.jsp 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

万户OA showResult.action 后台SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

万户OA smartUpload.jsp 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

万户OA TeleConferenceService XXE注入漏洞.md

update

2024-11-06 14:10:36 +08:00

信呼OA beifenAction.php 后台目录遍历漏洞.md

update

2024-11-06 14:10:36 +08:00

信呼OA qcloudCosAction.php 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

华天动力OA 8000版 workFlowService SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

启莱OA CloseMsg.aspx SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

启莱OA messageurl.aspx SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

启莱OA treelist.aspx SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

帆软报表 2012 SSRF漏洞.md

update

2024-11-06 14:10:36 +08:00

帆软报表 2012 信息泄露漏洞.md

update

2024-11-06 14:10:36 +08:00

帆软报表 channel 远程命令执行漏洞.md

update

2024-11-06 14:10:36 +08:00

帆软报表 V8 任意文件读取漏洞 CNVD-2018-04757.md

update

2024-11-06 14:10:36 +08:00

帆软报表 V9 任意文件覆盖文件上传.md

update

2024-11-06 14:10:36 +08:00

新点OA ExcelExport 敏感信息泄露漏洞.md

update

2024-11-06 14:10:36 +08:00

智明 SmartOA EmailDownload.ashx 任意文件下载漏洞.md

update

2024-11-06 14:10:36 +08:00

极限OA video_file.php 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA DBconfigReader.jsp 数据库配置信息泄漏漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Bridge saveYZJFile 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Cology BshServlet 远程代码执行漏洞 CNVD-2019-32204.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Cology getSqlData SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Cology HrmCareerApplyPerView.jsp SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Cology jqueryFileTree.jsp 目录遍历漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-cology KtreeUploadAction 任意文件上传.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Cology LoginSSO.jsp SQL注入漏洞 CNVD-2021-33202.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Cology ofsLogin.jsp 前台任意用户登录漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Cology users.data 敏感信息泄漏.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Cology VerifyQuickLogin.jsp 任意管理员登录漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-cology WorkflowServiceXml RCE.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Office group_xml.php SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Office mysql_config.ini 数据库信息泄漏漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Office OfficeServer.php 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Office officeserver.php 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Office UploadFile.php 任意文件上传漏洞 CNVD-2021-49104.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Office uploadify 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Office UserSelect 未授权访问漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA E-Weaver SignatureDownLoad 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA getdata.jsp SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA ln.FileDownload 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA sysinterfacecodeEdit.jsp 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA uploadOperation.jsp 任意文件上传.md

update

2024-11-06 14:10:36 +08:00

泛微OA v9 E-Cology browser.jsp SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA weaver.common.Ctrl 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

泛微OA WorkflowCenterTreeData SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

用友 ERP-NC NCFindWeb 目录遍历漏洞.md

update

2024-11-06 14:10:36 +08:00

用友 FE协作办公平台 templateOfTaohong_manager.jsp 目录遍历漏洞.md

update

2024-11-06 14:10:36 +08:00

用友 GRP-U8 Proxy SQL注入 CNNVD-201610-923.md

update

2024-11-06 14:10:36 +08:00

用友 GRP-U8 UploadFileData 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

用友 NC bsh.servlet.BshServlet 远程命令执行漏洞.md

update

2024-11-06 14:10:36 +08:00

用友 NC Cloud jsinvoke 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

用友 NC Cloud 远程代码执行漏洞 CNVD-C-2023-76801.md

update

2024-11-06 14:10:36 +08:00

用友 NC FileReceiveServlet 反序列化RCE漏洞.md

update

2024-11-06 14:10:36 +08:00

用友 NC XbrlPersistenceServlet反序列化.md

update

2024-11-06 14:10:36 +08:00

用友 NCCloud FS文件管理SQL注入.md

update

2024-11-06 14:10:36 +08:00

用友 U8 cloud upload.jsp 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

用友 U8 CRM客户关系管理系统 getemaildata.php 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

用友 U8 CRM客户关系管理系统 getemaildata.php 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00

用友 U8 OA getSessionList.jsp 敏感信息泄漏漏洞.md

update

2024-11-06 14:10:36 +08:00

用友 U8 OA test.jsp SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

用友移动管理系统 uploadApk.do 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

用友时空 KSOA V9.0 文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

红帆OA ioFileExport.aspx 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00

致翔OA msglog.aspx SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

致远 OA 未授权短信验证码绕过重置密码漏洞.md

update

2024-11-06 14:10:36 +08:00

致远OA A6 config.jsp 敏感信息泄漏漏洞.md

update

2024-11-06 14:10:36 +08:00

致远OA A6 createMysql.jsp 数据库敏感信息泄露.md

update

2024-11-06 14:10:36 +08:00

致远OA A6 DownExcelBeanServlet 用户敏感信息泄露.md

update

2024-11-06 14:10:36 +08:00

致远OA A6 initDataAssess.jsp 用户敏感信息泄露.md

update

2024-11-06 14:10:36 +08:00

致远OA A6 setextno.jsp SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

致远OA A6 test.jsp SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

致远OA A8 htmlofficeservlet 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

致远OA A8 status.jsp 信息泄露漏洞.md

update

2024-11-06 14:10:36 +08:00

致远OA ajax.do 任意文件上传 CNVD-2021-01627.md

update

2024-11-06 14:10:36 +08:00

致远OA getSessionList.jsp Session泄漏漏洞.md

update

2024-11-06 14:10:36 +08:00

致远OA M1Server userTokenService 远程命令执行漏洞.md

update

2024-11-06 14:10:36 +08:00

致远OA webmail.do 任意文件下载 CNVD-2020-62422.md

update

2024-11-06 14:10:36 +08:00

致远OA wpsAssistServlet 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

致远OA 帆软组件 ReportServer 目录遍历漏洞.md

update

2024-11-06 14:10:36 +08:00

蓝凌EIS 智慧协同平台 api.aspx 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

蓝凌OA admin.do JNDI远程命令执行.md

update

2024-11-06 14:10:36 +08:00

蓝凌OA custom.jsp 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00

蓝凌OA kmImeetingRes.do 后台SQL注入漏洞 CNVD-2021-01363.md

update

2024-11-06 14:10:36 +08:00

蓝凌OA sysSearchMain.do 远程命令执行漏洞.md

update

2024-11-06 14:10:36 +08:00

蓝凌OA treexml.tmpl 远程命令执行漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.2 upload.php 后台任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.5 login_code.php 任意用户登录.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.5 logincheck_code.php 登陆绕过漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.5 swfupload_new.php SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.6 insert SQL注入漏洞

update

2024-11-06 14:10:36 +08:00

通达OA v11.6 print.php 任意文件删除&RCE.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.6 report_bi.func.php SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.7 auth_mobi.php 在线用户登录漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.7 delete_cascade.php 后台SQL注入.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.8 api.ali.php 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.8 getway.php 远程文件包含漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.8 update.php 后台文件包含XSS漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.8 update.php 后台文件包含命令执行漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.9 getdata 任意命令执行漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v11.9 upsharestatus 后台SQL注入漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v2014 get_contactlist.php 敏感信息泄漏漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v2017 action_upload.php 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA v2017 video_file.php 任意文件下载漏洞.md

update

2024-11-06 14:10:36 +08:00

通达OA 部分漏洞信息整合.md

update

2024-11-06 14:10:36 +08:00

金和OA C6 DossierBaseInfoView.aspx 后台越权信息泄露漏洞.md

update

2024-11-06 14:10:36 +08:00

金和OA C6 download.jsp 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00

金和OA C6 OpenFile.aspx 后台越权敏感文件遍历漏洞.md

update

2024-11-06 14:10:36 +08:00

金蝶OA Apusic应用服务器(中间件) server_file 目录遍历漏洞.md

update

2024-11-06 14:10:36 +08:00

金蝶OA EAS系统 uploadLogo.action 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00

金蝶OA server_file 目录遍历漏洞.md

update

2024-11-06 14:10:36 +08:00

金蝶OA 云星空 CommonFileServer 任意文件读取漏洞.md

update

2024-11-06 14:10:36 +08:00

金蝶OA 云星空 ScpSupRegHandler 任意文件上传漏洞.md

update

2024-11-06 14:10:36 +08:00