From 623016ea215cc51c97c5326c10dcefd53eea7343 Mon Sep 17 00:00:00 2001 From: Goby <50955360+gobysec@users.noreply.github.com> Date: Thu, 7 Sep 2023 22:28:55 +0800 Subject: [PATCH] Update GobyVuls-Document.md --- GobyVuls-Document.md | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/GobyVuls-Document.md b/GobyVuls-Document.md index 94fe933..46ad6ab 100644 --- a/GobyVuls-Document.md +++ b/GobyVuls-Document.md @@ -1,7 +1,22 @@ # Goby History Update Vulnerability Total Document (Continuously Update) The following content is an updated vulnerability from Goby. Some of the vulnerabilities are recorded on the screen for easy viewing. -**Updated document date: September 6, 2023** +**Updated document date: September 7, 2023** + +## Weaver ecology XmlRpcServlet Path File Read Vulnerability + +| **Vulnerability** | **Weaver ecology XmlRpcServlet Path File Read Vulnerability** | +| :----: | :-----| +| **Chinese name** | 泛微 e-cology XmlRpcServlet 接口文件读取漏洞 | +| **CVSS core** | 7.8 | +| **FOFA Query** (click to view the results directly)| [((body="szFeatures" && body="redirectUrl") \| (body="rndData" && body="isdx") \| (body="typeof poppedWindow" && body="client/jquery.client_wev8.js") \| body="/theme/ecology8/jquery/js/zDialog_wev8.js" \| body="ecology8/lang/weaver_lang_7_wev8.js" \| body="src=\"/js/jquery/jquery_wev8.js" \| (header="Server: WVS" && (title!="404 Not Found" && header!="404 Not Found"))) && header!="testBanCookie" && header!="Couchdb" && header!="JoomlaWor" && body!="28ZE"](https://en.fofa.info/result?qbase64=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%2BMjhaRTwvdGl0bGU%2BIg%3D%3D) | +| **Number of assets affected** | 111321 | +| **Description** | Weaver e-cology is an OA office system specifically designed for large and medium-sized enterprises, supporting simultaneous work on PC, mobile, and WeChat platforms.Attackers can use this vulnerability to read important system files (such as database configuration files, system configuration files), database configuration files, etc., resulting in an extremely insecure state of the website. | +| **Impact** | Attackers can use this vulnerability to read important system files (such as database configuration files, system configuration files), database configuration files, etc., resulting in an extremely insecure state of the website. | + +![](https://s3.bmp.ovh/imgs/2023/09/07/af06beef9479a1c1.gif) + + ## UF U8 Cloud upload.jsp file upload vulnerability