diff --git a/蓝凌OAsysUiComponent 文件存在任意文件上传漏洞.md b/蓝凌OAsysUiComponent 文件存在任意文件上传漏洞.md index 7dc5e3e..f5f370f 100644 --- a/蓝凌OAsysUiComponent 文件存在任意文件上传漏洞.md +++ b/蓝凌OAsysUiComponent 文件存在任意文件上传漏洞.md @@ -8,6 +8,7 @@ app="Landray-OA系统" ## poc +直接访问路径,发现未授权文件上传 http://.com/sys/ui/sys_ui_component/sysUiComponent.do?method=upload ![c9857f5370d4abd1547fa7cb1988a18a](https://github.com/wy876/POC/assets/139549762/ee361dae-cfa2-4eae-910f-501331731347) ```