GobyVuls/TongdaOA/TongdaOA_anyfile_delete_getshell

Tongda OA any file delete getshell

Attackers can obtain server system permissions through file deletion vulnerability and file upload vulnerability of earlier versions.

Affected version: Tongda OA 11.6

FOFA query rule: app="TongDa-OA"

Demo