Update 蓝凌OAsysUiComponent 文件存在任意文件上传漏洞.md

2023-11-16 20:40:26 +08:00 · 2023-11-16 20:40:26 +08:00 · d6144d98ac
commit d6144d98ac
parent cbb59c2cc3
1 changed files with 1 additions and 0 deletions
--- a/文件存在任意文件上传漏洞.md
+++ b/文件存在任意文件上传漏洞.md
@ -8,6 +8,7 @@ app="Landray-OA系统"


 ## poc
+直接访问路径，发现未授权文件上传 http://.com/sys/ui/sys_ui_component/sysUiComponent.do?method=upload
 ![c9857f5370d4abd1547fa7cb1988a18a](https://github.com/wy876/POC/assets/139549762/ee361dae-cfa2-4eae-910f-501331731347)

 ```