admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-06-20 01:40:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add TongdaOA_anyfile_delete_getshell

Browse Source
This commit is contained in:
tardc 2020-08-21 19:02:18 +08:00
parent 83900b12f0
commit 270a3b4afe
2 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
TongdaOA/TongdaOA_anyfile_delete_getshell/README.md Normal file
View File

@ -0,0 +1,11 @@
# Tongda OA any file delete getshell
Attackers can obtain server system permissions through file deletion vulnerability and file upload vulnerability of earlier versions.
**Affected version**: Tongda OA 11.6
**[FOFA](https://fofa.so/result?q=app%3D"TongDa-OA"&qbase64=YXBwPSJUb25nRGEtT0Ei) query rule**: app="TongDa-OA"
# Demo
![](tongdaOA_getshell.gif)

BIN
TongdaOA/TongdaOA_anyfile_delete_getshell/tongdaOA_getshell.gif Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 975 KiB