admin/POC00
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update 蓝凌OAsysUiComponent 文件存在任意文件上传漏洞.md

Browse Source
This commit is contained in:
wy876 2023-11-16 20:40:26 +08:00 committed by GitHub
parent cbb59c2cc3
commit d6144d98ac
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
蓝凌OAsysUiComponent 文件存在任意文件上传漏洞.md
View File

@ -8,6 +8,7 @@ app="Landray-OA系统"
## poc
直接访问路径，发现未授权文件上传 http://.com/sys/ui/sys_ui_component/sysUiComponent.do?method=upload
![c9857f5370d4abd1547fa7cb1988a18a](https://github.com/wy876/POC/assets/139549762/ee361dae-cfa2-4eae-910f-501331731347)
```