POC/用友OA at main - POC

某友时空KSOA PayBill SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

某友时空KSOA-PayBill-SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友 GRP U8 license_check.jsp 存在SQL注入.md

first commit

2025-03-04 23:12:57 +08:00

用友 GRP-U8 bx_historyDataCheck.jsp SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友 NC Cloud jsinvoke 任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友 NC uapws wsdl XXE漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友-GRP-U8-bx_historyDataCheck.jsp-SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友-GRP-U8-license_check.jsp-存在SQL注入.md

first commit

2025-03-04 23:12:57 +08:00

用友-NC-Cloud-jsinvoke-任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友-NC-uapws-wsdl-XXE漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友-U9-PatchFile.asmx任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友CRM 任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友crm-swfupload接口存在任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友CRM-任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友crm客户关系管理help.php存在任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友CRM客户关系管理系统import.php存在任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友CRM系统reservationcomplete.php存在逻辑漏洞直接登录后台.md

first commit

2025-03-04 23:12:57 +08:00

用友CRM系统uploadfile.php接口存在任意文件上传.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-A-Cloud政府财务云系统接口selectGlaDatasourcePreview存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-bx_dj_check.jsp存在SQL注入.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-dialog_moreUser_check.jsp前台SQL注入.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-FileUpload任意文件上传.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-listSelectDialogServlet存在SQL注入.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-obr_zdybxd_check.jsp存在SQL注入.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-obr_zdybxd_check存在sql注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-operOriztion存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-PayReturnForWcp接口存在XXE漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-Proxy存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-SelectDMJE.jsp_SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-slbmbygr.jsp存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-sqcxIndex.jsp存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-ufgovbank存在XXE漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-UploadFileData任意文件上传.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8-userInfoWeb存在SQL注入.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8存在XML注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8日志泄漏漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友GRP-U8系统taskmanager_login存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友GRPA++Cloud政府财务云存在任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC word.docx任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC_CLOUD_smartweb2.RPC.d_XML外部实体注入.md

first commit

2025-03-04 23:12:57 +08:00

用友NC_Cloud_soapFormat.ajax接口存在XXE.md

first commit

2025-03-04 23:12:57 +08:00

用友NC_grouptemplet文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC_saveImageServlet接口存在文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-ActionServlet存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-avatar接口存在文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-bill存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-cartabletimeline存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友nc-cloud RCE.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-Cloud uploadChunk 任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-Cloud_importhttpscer接口存在任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友nc-cloud-RCE.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-Cloud-uploadChunk-任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-Cloud接口blobRefClassSearch存在反序列化漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-Cloud接口blobRefClassSea存在反序列化漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-Cloud文件服务器用户登陆绕过漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-Cloud系统queryPsnInfo存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-Cloud系统queryStaffByName存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-Cloud系统show_download_content接口存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-Cloud系统接口getStaffInfo存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-complainbilldetail存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-downCourseWare任意文件读取.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-downTax存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-oacoSchedulerEvents接口存在sql注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-pagesServlet存在SQL注入.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-process存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-runStateServlet接口存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-saveDoc.ajax存在任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-showcontent接口存在sql注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-uploadControl接口存在文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-warningDetailInfo接口存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-word.docx任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC-workflowImageServlet接口存在sql注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NCCloud系统runScript存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC及U8cloud系统接口LoggingConfigServlet存在反序列化漏洞(XVE-2024-18151).md

first commit

2025-03-04 23:12:57 +08:00

用友NC接口checkekey存在SQL注入漏洞(XVE-2024-37013).md

first commit

2025-03-04 23:12:57 +08:00

用友NC接口ConfigResourceServlet存在反序列漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC接口download存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC接口PaWfm存在sql注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC接口saveXmlToFIleServlet存在文件上传.md

first commit

2025-03-04 23:12:57 +08:00

用友nc电子采购信息系统securitycheck存在sql注入.md

first commit

2025-03-04 23:12:57 +08:00

用友NC的download文件存在任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC系统complainjudge接口SQL注入漏洞(XVE-2024-19043).md

first commit

2025-03-04 23:12:57 +08:00

用友NC系统FileManager接口存在任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC系统linkVoucher存在sql注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC系统printBill接口存在任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC系统querygoodsgridbycode接口code参数存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC系统registerServlet接口存在JNDI注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC系统word.docx存在信息泄露漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC系统接口link存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友NC系统接口UserAuthenticationServlet存在反序列化RCE漏洞(XVE-2024-18302).md

first commit

2025-03-04 23:12:57 +08:00

用友NC系统接口yerfile_down存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友u8-cloud系统ESBInvokerServlet存在反序列化漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友u9系统接口GetConnectionString存在信息泄露漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友u9系统接口TransWebService存在未授权访问漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8 Cloud-ArchiveVerify存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8 Cloud-KeyWordReportQuery存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8_cloud_KeyWordDetailReportQuery_SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8_Cloud-base64存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-cloud RegisterServlet接口存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud upload任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud-ArchiveVerify存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud-KeyWordReportQuery存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud-linkntb.jsp存在SQL注入漏洞(CNVD-C-2023-708748).md

first commit

2025-03-04 23:12:57 +08:00

用友U8-cloud-RegisterServlet接口存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud-smartweb2.showRPCLoadingTip.d存在XXE漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud-TableInputOperServlet存在反序列化漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud-upload任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud接口FileManageServlet存在反序列漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud接口FileServlet存在任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud接口ServiceDispatcherServlet存在反序列漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud系统BusinessRefAction存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud系统XChangeServlet接口存在XXE漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud系统接口AddTaskDataRightAction存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud系统接口approveservlet存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud系统接口esnserver存在任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud系统接口MeasQueryConditionFrameAction存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud系统接口MultiRepChooseAction存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud系统接口ReleaseRepMngAction存在SQL注入漏洞复现(CNVD-2024-33023).md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud系统接口RepAddToTaskAction存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-Cloud系统接口uapbd.refdef.query存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-CRM客户关系管理系统downloadfile.php存在任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-CRM客户关系管理系统getemaildata.php任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-CRM接口exportdictionary.php存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-CRM接口rellistname.php存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-CRM系统ajaxgetborrowdata.php存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-CRM系统chkService.php存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-CRM系统fillbacksetting.php存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-CRM系统getDeptName存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-CRM系统getufvouchdata.php存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-CRM系统接口attrlist存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-CRM系统接口eventseteventsetlist.php存在SQL注入.md

Update 用友U8-CRM系统接口eventseteventsetlist.php存在SQL注入.md

2025-04-21 09:17:26 +08:00

用友U8-CRM系统接口reservationcomplete.php存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-nc.bs.sm.login2.RegisterServlet存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8-OA协同工作系统doUpload.jsp任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8+CRM系统leadconversion.php存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8cloud-ExportUfoFormatAction存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8cloud接口MeasureQueryByToolAction存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8Cloud系统接口MeasureQResultAction存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8CRM系统接口relobjreportlist.php存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8CRM系统接口setremindtoold.php存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U8GRP-fastjson漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U9-PatchFile.asmx接口存在任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U9-UMWebService.asmx存在文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友U9系统DoQuery接口存在SQL注入.md

first commit

2025-03-04 23:12:57 +08:00

用友Ufida-ELTextFile.load.d任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友YonBIP高级版yonbiplogin存在任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友政务财务系统FileDownload存在任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友时空KSOA-imagefield接口存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友时空KSOA-linkadd.jsp存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友时空KSOA接口com.sksoft.bill.QueryService存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友时空KSOA系统接口fillKP.jsp存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友时空KSOA系统接口PreviewKPQT.jsp存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友时空KSOA系统接口PrintZP.jsp存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友时空KSOA系统接口PrintZPFB.jsp存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友时空KSOA系统接口PrintZPYG.jsp存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友时空KSOA系统接口PrintZPZP.jsp存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友智石开PLM-getWorkGroups存在信息泄露漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友畅捷通-TPlus-CheckMutex存在sql注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友畅捷通-TPlus系统接口ajaxpro存在ssrf漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友畅捷通-TPlus系统接口FileUploadHandler.ashx存在任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友畅捷通CRM-create_site.phpSQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友畅捷通RRATableController存在反序列化漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友畅捷通TPlus-DownloadProxy.aspx任意文件读取漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友畅捷通TPlus-InitServerInfo存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友畅捷通TPlus-keyEdit.aspx接口存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友移动管理平台uploadIcon任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

用友移动系统管理getFileLocal接口存在任意文件读取.md

first commit

2025-03-04 23:12:57 +08:00

用友移动系统管理uploadApk接口存在任意文件上传.md

first commit

2025-03-04 23:12:57 +08:00

用友系统-U9企业版存在任意文件上传漏洞.md

first commit

2025-03-04 23:12:57 +08:00

畅捷通CRM系统newleadset.php接口存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00

畅捷通TPlus-App_Code.ashx存在远程命令执行漏洞.md

first commit

2025-03-04 23:12:57 +08:00

畅捷通TPlus-KeyInfoList.aspx存在SQL注入漏洞.md

first commit

2025-03-04 23:12:57 +08:00