Penetration_Testing_POC/books/亿赛通电子文档安全管理系统getSoftWareIssuance非授权访问的XXE漏洞 - 原创文章发布(Original Article) - T00ls ＂低调求发展 - 潜心习安全.html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns=http://www.w3.org/1999/xhtml data-arp style><!--
 Page saved with SingleFile 
 url: https://www.t00ls.com/thread-72889-1-1.html 
--><meta charset=utf-8>
<title>亿赛通 电子文档安全管理系统getSoftWareIssuance非授权访问的XXE漏洞 - 原创文章发布(Original Article) - T00ls | 低调求发展 - 潜心习安全</title>
<meta name=keywords content="T00ls.Com - 低调求发展 - 潜心习安全 - Focus On Cyber Security">
<meta name=description content=" T00ls 今年公司采购了一套亿赛通系统，闲来无事，给它做了一波审计，发现漏洞有点多，搞了好多个CNVD证书，此漏洞评分 ：5.0 版本号:CDG V5.6.2.126.139&amp;nbsp;&amp;nbsp ... - Discuz! Board">
<meta name=generator content="Discuz! 1.0">
<meta name=author content="Discuz! Team and Comsenz UI Team">
<meta name=copyright content="2001-2009 Comsenz Inc.">
<meta name=MSSmartTagsPreventParsing content=True>
<meta http-equiv=MSThemeCompatible content=Yes>
<meta http-equiv=X-UA-Compatible content="IE=9">
<link rel=archives title=T00ls href=https://www.t00ls.com/archiver/>
<style>*{word-wrap:break-word}html,body{border:0!important}body{background:#EEEEEE;text-align:center}body,td{color:#444;font:12px/1.6em Verdana,Helvetica,Arial,sans-serif}body,h1{margin:0;padding:0}a{text-decoration:none}a:hover{text-decoration:underline}table{empty-cells:show;border-collapse:collapse}.s_clear:after{content:".";display:block;height:0;clear:both;visibility:hidden}.s_clear{zoom:1}.wrap{text-align:left;margin:0 auto}#wrap{padding-bottom:10px;min-height:450px;border:5px solid #333333;background-color:#FFF;clear:both}.wrap{width:98%}.mainbox table{width:100%}@keyframes myanimation{0%{color:white}25%{color:yellow}50%{color:green}75%{color:brown}100%{color:red}}#wrap{border-bottom:5px solid}</style><style>.threadfix{padding-bottom:0!important;min-height:300px!important}.viewthread table{table-layout:fixed}.viewthread td.postcontent{vertical-align:top;border:none;overflow:hidden}.viewthread td.postcontent{padding:0 15px}.postmessage{clear:left}.postmessage *{line-height:normal}.postmessage h1{margin:8px 0;font-size:1.17em}.postmessage h1 a{font-weight:400;color:#444}#threadtitle{margin-bottom:8px;border-bottom:1px dashed #999}.defaultpost{padding-bottom:1em}.t_msgfont{font-size:14px;line-height:1.6em}.t_msgfont *{line-height:normal}.t_attach{border:1px solid #999;background:#FFF;font-size:12px;padding:5px}.t_attach{width:130px}.t_msgfontfix table{margin-left:1px}.t_msgfontfix{min-height:100px}</style>
<style data-id=immersive-translate-input-injected-css>@-webkit-keyframes immersive-translate-loading-animation{from{-webkit-transform:rotate(0deg)}to{-webkit-transform:rotate(359deg)}}@keyframes immersive-translate-loading-animation{from{transform:rotate(0deg)}to{transform:rotate(359deg)}}@keyframes immersiveTranslateShadowRolling{0%{box-shadow:0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0)}12%{box-shadow:100px 0 var(--loading-color),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0)}25%{box-shadow:110px 0 var(--loading-color),100px 0 var(--loading-color),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0)}36%{box-shadow:120px 0 var(--loading-color),110px 0 var(--loading-color),100px 0 var(--loading-color),0px 0 rgba(255,255,255,0)}50%{box-shadow:130px 0 var(--loading-color),120px 0 var(--loading-color),110px 0 var(--loading-color),100px 0 var(--loading-color)}62%{box-shadow:200px 0 rgba(255,255,255,0),130px 0 var(--loading-color),120px 0 var(--loading-color),110px 0 var(--loading-color)}75%{box-shadow:200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),130px 0 var(--loading-color),120px 0 var(--loading-color)}87%{box-shadow:200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),130px 0 var(--loading-color)}100%{box-shadow:200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0)}}@media screen and (max-width:768px){}@media screen and (max-width:768px){}@media screen and (max-width:768px){}@keyframes image-loading-rotate{from{transform:rotate(360deg)}to{transform:rotate(0deg)}}</style><meta name=referrer content=no-referrer><link type=image/x-icon rel="shortcut icon" href="data:image/x-icon;base64,AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAA9PT3/fX19/319ff99fX3/fX19/319ff96enr/cXFx/319ff99fX3/fX19/319ff99fX3/fX19/319ff89PT3/fX19////////////////////////////rq6u/xYWFv/b29v/////////////////////////////////fX19/319ff///////////////////////////8vLy/8BAQH/RUVF//39/f///////////////////////////319ff99fX3////////////////////////////8/Pz/NjY2/wgICP/t7e3///////////////////////////99fX3/fX19/////////////////////////////////7i4uP8AAAD/pqam////////////////////////////fX19/319ff/////////////////////////////////+/v7/TU1N/yMjI//4+Pj//////////////////////319ff99fX3//////////////////////////////////////9/f3/8QEBD/jIyM//////////////////////99fX3/fX19////////////////////////////////////////////m5ub/xEREf/l5eX/////////////////fX19/319ff////////////////////////////////////////////////9TU1P/W1tb/////////////////319ff99fX3//////8/Pz/8uLi7/kZGR/+vr6///////////////////////7Ozs/yMjI/+0tLT///////////99fX3/fX19///////X19f/AQEB/xMTE/9gYGD/pKSk/9jY2P/09PT//v7+///////MzMz/HR0d/+jo6P//////fX19/319ff//////+/v7/ysrK/8AAAD/AAAA/wAAAP8AAAD/DAwM/x0dHf8qKir/Hx8f/wMDA/+2trb//////319ff99fX3////////////Q0ND/Ly8v/wEBAf8AAAD/AAAA/wAAAP8AAAD/AAAA/wAAAP8PDw//8vLy//////99fX3/fX19//////////////////z8/P/U1NT/np6e/3Z2dv9aWlr/SEhI/0ZGRv9cXFz/srKy////////////fX19/319ff///////////////////////////////////////////////////////////////////////////319ff89PT3/fX19/319ff99fX3/fX19/319ff99fX3/fX19/319ff99fX3/fX19/319ff99fX3/fX19/319ff89PT3/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="><style>.sf-hidden{display:none!important}</style><link rel=canonical href=https://www.t00ls.com/thread-72889-1-1.html><meta http-equiv=content-security-policy content="default-src 'none'; font-src 'self' data:; img-src 'self' data:; style-src 'unsafe-inline'; media-src 'self' data:; script-src 'unsafe-inline' data:; object-src 'self' data:; frame-src 'self' data:;"></head>
<body id=viewthread>
<div id=append_parent style=display:none!important></div><div id=ajaxwaitid style=display:none!important></div>
<div id=header style=display:none!important>
</div>
 
 
<div id=nav style=display:none!important>
 » » 亿赛通 电子文档安全管理系统非授权访问的XXE漏洞</div>
<div id=ad_text style=display:none!important></div>
<div id=wrap class="wrap s_clear threadfix">
<div class=forumcontrol style=display:none!important>
</div>
<div id=postlist class="mainbox viewthread"><div id=post_1203024><table id=pid1203024 summary=pid1203024 cellspacing=0 cellpadding=0>
<tbody><tr>
<td class=postauthor rowspan=2 style=display:none!important>
 
</td>
<td class=postcontent>
<div id=threadstamp style=display:none!important></div><div class=postinfo style=display:none!important>
</div>
<div class=defaultpost>
<div id=ad_thread2_0 style=display:none!important></div><div id=ad_thread3_0 style=display:none!important></div><div id=ad_thread4_0 style=display:none!important></div>
<div class="postmessage firstpost">
<div id=threadtitle>
<h1><a href="https://www.t00ls.com/forumdisplay.php?fid=52&amp;filter=type&amp;typeid=1">[【原创】]</a> 亿赛通 电子文档安全管理系统非授权访问的XXE漏洞</h1>
</div>
<div class=t_msgfontfix>
<table cellspacing=0 cellpadding=0><tbody><tr><td class=t_msgfont id=postmessage_1203024><br>
<br>
今年公司采购了一套亿赛通系统，闲来无事，给它做了一波审计，发现漏洞有点多，搞了好多个CNVD证书，此漏洞评分 ：5.0<br>
 版本号:CDG V5.6.2.126.139&nbsp;&nbsp;<br>
<br>
<br>
<br>
漏洞路径：/CDGServer3/software/getSoftWareIssuance<br>
<span style=position:absolute;display:none id=attach_167255></span>
<img src=data:image/png;base64,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
<div class=t_attach id=aimg_167255_menu style=position:absolute;z-index:301;opacity:1;left:202.203px;top:414.195px;display:none> 
 (329.71 KB)
</div>
<br>
<br>
<br>
代码分析：<br>
通过检查web.xml文件，发现/software路径是可以非授权访问的，跟踪找到SoftwareDispatchController中的getSoftWareIssuance(HttpServletRequest request, HttpServletResponse response)方法，该方法的访问路径是/software/getSoftWareIssuance。通过分析该方法，发现调用了dom4j的DocumentHelper.parseText(toServerXML)来处理数据，同时dom4j的版本是1.6.1 存在XXE漏洞。<br>
<span style=position:absolute;display:none id=attach_167253></span>
<img src="data:image/png;base64,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
<div class=t_attach id=aimg_167253_menu style=position:absolute;display:none> 
 (173.12 KB)
</div>
<br>
<span style=position:absolute;display:none id=attach_167249></span>
<img src="data:image/png;base64,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
<div class=t_attach id=aimg_167249_menu style=position:absolute;z-index:301;opacity:1;left:202.203px;top:2025.94px;display:none> 
 (62.2 KB)
</div>
<br>
<span style=position:absolute;display:none id=attach_167251></span>
<img src=data:image/png;base64,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
<div class=t_attach id=aimg_167251_menu style=position:absolute;display:none> 
 (88.77 KB)
</div>
<br>
<br>
漏洞复现：<br>
1、通过脚本生成POC：<br>
<span style=position:absolute;display:none id=attach_167252></span>
<img src="data:image/png;base64,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
<div class=t_attach id=aimg_167252_menu style=position:absolute;z-index:301;opacity:1;left:202.203px;top:3800.54px;display:none> 
 (92.86 KB)
</div>
 <br>
 <br>
2、把加密后的POC放到POST请求包中：<br>
POST请求包：/CDGServer3/software/getSoftWareIssuance<br>
 
<span style=position:absolute;display:none id=attach_167250></span>
<img src="data:image/png;base64,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
<div class=t_attach id=aimg_167250_menu style=position:absolute;z-index:301;opacity:1;left:202.203px;top:4510.34px;display:none> 
 (57.6 KB)
</div>
<br>
3、Dnslog服务产生了一条记录：<br>
 
<span style=position:absolute;display:none id=attach_167248></span>
<img src=data:image/png;base64,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
<div class=t_attach id=aimg_167248_menu style=position:absolute;z-index:301;opacity:1;left:202.203px;top:4852.34px;display:none> 
 (22.83 KB)
</div>
 TCV值0
</table>
</div>
</div>
</div>
</tr>
</table>
</div>
</div>
<div id=f_post class="mainbox viewthread" style=display:none!important>
<form method=post id=fastpostform action="post.php?action=reply&amp;fid=52&amp;tid=72889&amp;extra=page%3D1&amp;replysubmit=yes&amp;infloat=yes&amp;handlekey=fastpost" style=display:none!important>
<table cellspacing=0 cellpadding=0 style=display:none!important>
<tbody style=display:none!important><tr style=display:none!important>
<td class=postcontent style=display:none!important>
<div class=editor_tb style=display:none!important>
</div>
 
</td>
</tr>
</table>
</form>
</div>
</div>
<div id=immersive-translate-popup style=color-scheme:initial;forced-color-adjust:initial;mask:initial;math-depth:initial;position:initial;position-anchor:initial;text-size-adjust:initial;appearance:initial;color:initial;font:initial;font-palette:initial;font-synthesis:initial;position-area:initial;text-orientation:initial;text-rendering:initial;text-spacing-trim:initial;-webkit-font-smoothing:initial;-webkit-locale:initial;-webkit-text-orientation:initial;-webkit-writing-mode:initial;writing-mode:initial;zoom:initial;accent-color:initial;place-content:initial;place-items:initial;place-self:initial;alignment-baseline:initial;anchor-name:initial;anchor-scope:initial;animation-composition:initial;animation:initial;app-region:initial;aspect-ratio:initial;backdrop-filter:initial;backface-visibility:initial;background:initial;background-blend-mode:initial;baseline-shift:initial;baseline-source:initial;block-size:initial;border-block:initial;border:initial;border-radius:initial;border-collapse:initial;border-end-end-radius:initial;border-end-start-radius:initial;border-inline:initial;border-start-end-radius:initial;border-start-start-radius:initial;inset:initial;box-decoration-break:initial;box-shadow:initial;box-sizing:initial;break-after:initial;break-before:initial;break-inside:initial;buffered-rendering:initial;caption-side:initial;caret-color:initial;clear:initial;clip:initial;clip-path:initial;clip-rule:initial;color-interpolation:initial;color-interpolation-filters:initial;color-rendering:initial;columns:initial;column-fill:initial;gap:initial;column-rule:initial;column-span:initial;contain:initial;contain-intrinsic-block-size:initial;contain-intrinsic-size:initial;contain-intrinsic-inline-size:initial;container:initial;content:initial;content-visibility:initial;counter-increment:initial;counter-reset:initial;counter-set:initial;cursor:initial;cx:initial;cy:initial;d:initial;display:none!important;dominant-baseline:initial;empty-cells:initial;field-sizing:initial;fill:initial;fill-opacity:initial;fill-rule:initial;filter:initial;flex:initial;flex-flow:initial;float:initial;flood-color:initial;flood-opacity:initial;grid:initial;grid-area:initial;height:initial;hyphenate-character:initial;hyphenate-limit-chars:initial;hyphens:initial;image-orientation:initial;image-rendering:initial;initial-letter:initial;inline-size:initial;inset-block:initial;inset-inline:initial;interpolate-size:initial;isolation:initial;letter-spacing:initial;lighting-color:initial;line-break:initial;list-style:initial;margin-block:initial;margin:initial;margin-inline:initial;marker:initial;mask-type:initial;math-shift:initial;math-style:initial;max-block-size:initial;max-height:initial;max-inline-size:initial;max-width:initial;min-block-size:initial;min-height:initial;min-inline-size:initial;min-width:initial;mix-blend-mode:initial;object-fit:initial;object-position:initial;object-view-box:initial;offset:initial;opacity:initial;order:initial;orphans:initial;outline:initial;outline-offset:initial;overflow-anchor:initial;overflow-clip-margin:initial;overflow-wrap:initial;overflow:initial;overlay:initial;overscroll-behavior-block:initial;overscroll-behavior-inline:initial;overscroll-behavior:initial;padding-block:initial;padding:initial;padding-inline:initial;page:initial;page-orientation:initial;paint-order:initial;perspective:initial;perspective-origin:initial;pointer-events:initial;position-try:initial;position-visibility:initial;quotes:initial;r:initial;resize:initial;rotate:initial;ruby-align:initial;ruby-position:initial;rx:initial;ry:initial;scale:initial;scroll-behavior:initial;scroll-margin-block:initial;scroll-margin:initial;scroll-margin-inline:initial;scroll-padding-block:initial;scroll-padding:initial;scroll-padding-inline:initial;scroll-snap-align:initial;scroll-snap-stop:initial;scroll-snap-type:initial;scroll-timeline:initial;scrollbar-color:initial;scrollbar-gutter:initial;scrollbar-width:initial;shape-image-threshold:initial;shape-margin:initial;shape-outside:initial;shape-rendering:initial;size:initial;speak:initial;stop-color:initial
 * Pico.css v1.5.6 (https://picocss.com)
 * Copyright 2019-2022 - Licensed under MIT
 */#mount{--font-family:system-ui,-apple-system,"Segoe UI","Roboto","Ubuntu","Cantarell","Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--line-height:1.5;--font-weight:400;--font-size:16px;--border-radius:0.25rem;--border-width:1px;--outline-width:3px;--spacing:1rem;--typography-spacing-vertical:1.5rem;--block-spacing-vertical:calc(var(--spacing)*2);--block-spacing-horizontal:var(--spacing);--grid-spacing-vertical:0;--grid-spacing-horizontal:var(--spacing);--form-element-spacing-vertical:0.75rem;--form-element-spacing-horizontal:1rem;--nav-element-spacing-vertical:1rem;--nav-element-spacing-horizontal:0.5rem;--nav-link-spacing-vertical:0.5rem;--nav-link-spacing-horizontal:0.5rem;--form-label-font-weight:var(--font-weight);--transition:0.2s ease-in-out;--modal-overlay-backdrop-filter:blur(0.25rem)}@media (min-width:576px){#mount{--font-size:17px}}@media (min-width:768px){#mount{--font-size:18px}}@media (min-width:992px){#mount{--font-size:19px}}@media (min-width:1200px){#mount{--font-size:20px}}@media (min-width:576px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*2.5)}}@media (min-width:768px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*3)}}@media (min-width:992px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*3.5)}}@media (min-width:1200px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*4)}}@media (min-width:576px){article{--block-spacing-horizontal:calc(var(--spacing)*1.25)}}@media (min-width:768px){article{--block-spacing-horizontal:calc(var(--spacing)*1.5)}}@media (min-width:992px){article{--block-spacing-horizontal:calc(var(--spacing)*1.75)}}@media (min-width:1200px){article{--block-spacing-horizontal:calc(var(--spacing)*2)}}dialog>article{--block-spacing-vertical:calc(var(--spacing)*2);--block-spacing-horizontal:var(--spacing)}@media (min-width:576px){dialog>article{--block-spacing-vertical:calc(var(--spacing)*2.5);--block-spacing-horizontal:calc(var(--spacing)*1.25)}}@media (min-width:768px){dialog>article{--block-spacing-vertical:calc(var(--spacing)*3);--block-spacing-horizontal:calc(var(--spacing)*1.5)}}a{--text-decoration:none}a.secondary,a.contrast{--text-decoration:underline}small{--font-size:0.875em}h1,h2,h3,h4,h5,h6{--font-weight:700}h1{--font-size:2rem;--typography-spacing-vertical:3rem}h2{--font-size:1.75rem;--typography-spacing-vertical:2.625rem}h3{--font-size:1.5rem;--typography-spacing-vertical:2.25rem}h4{--font-size:1.25rem;--typography-spacing-vertical:1.874rem}h5{--font-size:1.125rem;--typography-spacing-vertical:1.6875rem}[type="checkbox"],[type="radio"]{--border-width:2px}[type="checkbox"][role="switch"]{--border-width:3px}thead th,thead td,tfoot th,tfoot td{--border-width:3px}:not(thead,tfoot)>*>td{--font-size:0.875em}pre,code,kbd,samp{--font-family:"Menlo","Consolas","Roboto Mono","Ubuntu Monospace","Noto Mono","Oxygen Mono","Liberation Mono",monospace,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"}kbd{--font-weight:bolder}[data-theme="light"],#mount:not([data-theme="dark"]){--background-color:#fff;--background-light-green:#F5F7F9;--color:hsl(205deg,20%,32%);--h1-color:hsl(205deg,30%,15%);--h2-color:#24333e;--h3-color:hsl(205deg,25%,23%);--h4-color:#374956;--h5-color:hsl(205deg,20%,32%);--h6-color:#4d606d;--muted-color:hsl(205deg,10%,50%);--muted-border-color:hsl(205deg,20%,94%);--primary:hsl(195deg,85%,41%);--primary-hover:hsl(195deg,90%,32%);--primary-focus:rgba(16,149,193,0.125);--primary-inverse:#fff;--secondary:hsl(205deg,15%,41%);--secondary-hover:hsl(205deg,20%,32%);--secondary-focus:rgba(89,107,120,0.125);--secondary-inverse:#fff;--contrast:hsl(205deg,30%,15%);--contrast-hover:#000;--contrast-focus:rgba(89,107,120,0.125);--contrast-inverse:#fff;--mark-background-color:#fff2ca;--mark-color:#543a26;--ins-color:#388e3c;--del-color:#c62828;--blockquote-border-color:var(--muted-border-color);--blockquote-footer-color:var(--muted-c
-												add 代码审计、漏洞复现、burpsuite使用等文章

add
Apache NiFi 高版本命令执行利用
Apache mina CVE-2024-52046漏洞分析复现
CVE-2024-3408 D-tale bypassRCE分析
CVE-2024-42327：Zabbix SQL注入漏洞分析
Fastjson反序列化漏洞深度解析与利用和修复
IoT 安全从零到掌握：超详尽入门指南（基础篇）
IoT 安全从零到掌握：超详尽入门指南（实战篇）
JAVA代码审计-jfinal
JAVA安全-Classloader：理解与利用一篇就够了
JAVA安全之命令执行研究分析
JDBC Attack漫谈
Java 安全-反序列化 URLDNS＋CC＋自己挖一条链＋CB
Java安全-WebShell免杀的多种方式
Linux系统下反弹shell的理解
Nacos2.4.3新版漏洞利用方式总结
Spring FatJar写文件到RCE分析
TOTOLINK远程代码执行漏洞分析(CVE-2024-51228)
Windows应急响应之USBDevices日志
burpsuite数据包自动加解密插件，autoDecoder详细安装＋使用
cjson&json 二进制漏洞利用总结
ecology checkPassword 代码执行
kkFileView历史漏洞总结
pyramid 框架无回显挖掘
sql注入报错分享（mssql＋mysql）
【喜庆2025征文】路由器漏洞挖掘 - 原创文章发布(Original Article) - T00ls ｜ 低调求发展 - 潜心习安全
亿赛通 电子文档安全管理系统getSoftWareIssuance非授权访问的XXE漏洞 - 原创文章发布(Original Article) - T00ls ＂ 低调求发展 - 潜心习安全
代码审计 - MCMS v5.4.1 0day挖掘
代码审计-JetLinks物联网系统RCE
代码审计-九思oa dl.jsp任意文件读取
以AJ-Report为例从0以AJ-Report为例从0开始学习Java代码审计开始学习Java代码审计
使用burpsuite爆破带有验证码和随机uuid的密码的一次经验
分享SRC漏洞挖掘中js未授权漏洞挖掘的小技巧
分析某杀软规则库绕过certutil免杀实践
初探webshell免杀的艺术（PHP）
基于增加复杂逻辑数组混淆的webshell绕过
实战自动化加解密&加密场景下的暴力破解
实现xxl-job-executor 1.9.2阉割版Jetty服务的Handler内存马
小程序sign逆向和渗透两种思路，总有一款适合你
应用内存中的后渗透利用-远程工具密码读取
泛微e-office 11.0 RCE - 先知社区
浅析实战攻防中的信息收集
用友NC 漏洞分析--cartabletimeline存在SQL注入
禅道18.x-20.x版本漏洞挖掘思路分析
端口扫描工具横向对比测评
自动化patch shellcode到EXE实现免杀
若依一把梭哈工具源码分析
蓝凌EKP V16 fsscCommonPortlet未授权SQL注入漏洞分析
记一次某CMS审计（PHPCMS V9 block_admin.php 文件包含RCE漏洞）
记一次渗透测试实战之Sea
记某app使用autodecoder插件绕过加密数据包_重放防护
达梦数据库DMSQL-SQL注入小记
金和OA jc6代码审计（imagefield SQLI_viewConTemplate freemarker模板注入RCE）

											
										
										
											2025-01-05 00:12:04 -08:00
+								<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns=http://www.w3.org/1999/xhtml data-arp style><!--
 								 Page saved with SingleFile
 								 url: https://www.t00ls.com/thread-72889-1-1.html
 								--><meta charset=utf-8>
 								<title>亿赛通 电子文档安全管理系统getSoftWareIssuance非授权访问的XXE漏洞 - 原创文章发布(Original Article) - T00ls | 低调求发展 - 潜心习安全</title>
 								<meta name=keywords content="T00ls.Com - 低调求发展 - 潜心习安全 - Focus On Cyber Security">
 								<meta name=description content=" T00ls 今年公司采购了一套亿赛通系统，闲来无事，给它做了一波审计，发现漏洞有点多，搞了好多个CNVD证书，此漏洞评分 ：5.0 版本号:CDG V5.6.2.126.139&amp;nbsp;&amp;nbsp ... - Discuz! Board">
 								<meta name=generator content="Discuz! 1.0">
 								<meta name=author content="Discuz! Team and Comsenz UI Team">
 								<meta name=copyright content="2001-2009 Comsenz Inc.">
 								<meta name=MSSmartTagsPreventParsing content=True>
 								<meta http-equiv=MSThemeCompatible content=Yes>
 								<meta http-equiv=X-UA-Compatible content="IE=9">
 								<link rel=archives title=T00ls href=https://www.t00ls.com/archiver/>
 								<style>*{word-wrap:break-word}html,body{border:0!important}body{background:#EEEEEE;text-align:center}body,td{color:#444;font:12px/1.6em Verdana,Helvetica,Arial,sans-serif}body,h1{margin:0;padding:0}a{text-decoration:none}a:hover{text-decoration:underline}table{empty-cells:show;border-collapse:collapse}.s_clear:after{content:".";display:block;height:0;clear:both;visibility:hidden}.s_clear{zoom:1}.wrap{text-align:left;margin:0 auto}#wrap{padding-bottom:10px;min-height:450px;border:5px solid #333333;background-color:#FFF;clear:both}.wrap{width:98%}.mainbox table{width:100%}@keyframes myanimation{0%{color:white}25%{color:yellow}50%{color:green}75%{color:brown}100%{color:red}}#wrap{border-bottom:5px solid}</style><style>.threadfix{padding-bottom:0!important;min-height:300px!important}.viewthread table{table-layout:fixed}.viewthread td.postcontent{vertical-align:top;border:none;overflow:hidden}.viewthread td.postcontent{padding:0 15px}.postmessage{clear:left}.postmessage *{line-height:normal}.postmessage h1{margin:8px 0;font-size:1.17em}.postmessage h1 a{font-weight:400;color:#444}#threadtitle{margin-bottom:8px;border-bottom:1px dashed #999}.defaultpost{padding-bottom:1em}.t_msgfont{font-size:14px;line-height:1.6em}.t_msgfont *{line-height:normal}.t_attach{border:1px solid #999;background:#FFF;font-size:12px;padding:5px}.t_attach{width:130px}.t_msgfontfix table{margin-left:1px}.t_msgfontfix{min-height:100px}</style>
 								<style data-id=immersive-translate-input-injected-css>@-webkit-keyframes immersive-translate-loading-animation{from{-webkit-transform:rotate(0deg)}to{-webkit-transform:rotate(359deg)}}@keyframes immersive-translate-loading-animation{from{transform:rotate(0deg)}to{transform:rotate(359deg)}}@keyframes immersiveTranslateShadowRolling{0%{box-shadow:0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0)}12%{box-shadow:100px 0 var(--loading-color),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0)}25%{box-shadow:110px 0 var(--loading-color),100px 0 var(--loading-color),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0)}36%{box-shadow:120px 0 var(--loading-color),110px 0 var(--loading-color),100px 0 var(--loading-color),0px 0 rgba(255,255,255,0)}50%{box-shadow:130px 0 var(--loading-color),120px 0 var(--loading-color),110px 0 var(--loading-color),100px 0 var(--loading-color)}62%{box-shadow:200px 0 rgba(255,255,255,0),130px 0 var(--loading-color),120px 0 var(--loading-color),110px 0 var(--loading-color)}75%{box-shadow:200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),130px 0 var(--loading-color),120px 0 var(--loading-color)}87%{box-shadow:200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),130px 0 var(--loading-color)}100%{box-shadow:200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0)}}@media screen and (max-width:768px){}@media screen and (max-width:768px){}@media screen and (max-width:768px){}@keyframes image-loading-rotate{from{transform:rotate(360deg)}to{transform:rotate(0deg)}}</style><meta name=referrer content=no-referrer><link type=image/x-icon rel="shortcut icon" href="data:image/x-icon;base64,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"><style>.sf-hidden{display:none!important}</style><link rel=canonical href=https://www.t00ls.com/thread-72889-1-1.html><meta http-equiv=content-security-policy content="default-src 'none'; font-src 'self' data:; img-src 'self' data:; style-src 'unsafe-inline'; media-src 'self' data:; script-src 'unsafe-inline' data:; object-src 'self' data:; frame-src 'self' data:;"></head>
 								<body id=viewthread>
 								<div id=append_parent style=display:none!important></div><div id=ajaxwaitid style=display:none!important></div>
 								<div id=header style=display:none!important>
 								</div>
 								<div id=nav style=display:none!important>
 								 » » 亿赛通 电子文档安全管理系统非授权访问的XXE漏洞</div>
 								<div id=ad_text style=display:none!important></div>
 								<div id=wrap class="wrap s_clear threadfix">
 								<div class=forumcontrol style=display:none!important>
 								</div>
 								<div id=postlist class="mainbox viewthread"><div id=post_1203024><table id=pid1203024 summary=pid1203024 cellspacing=0 cellpadding=0>
 								<tbody><tr>
 								<td class=postauthor rowspan=2 style=display:none!important>
 								</td>
 								<td class=postcontent>
 								<div id=threadstamp style=display:none!important></div><div class=postinfo style=display:none!important>
 								</div>
 								<div class=defaultpost>
 								<div id=ad_thread2_0 style=display:none!important></div><div id=ad_thread3_0 style=display:none!important></div><div id=ad_thread4_0 style=display:none!important></div>
 								<div class="postmessage firstpost">
 								<div id=threadtitle>
 								<h1><a href="https://www.t00ls.com/forumdisplay.php?fid=52&amp;filter=type&amp;typeid=1">[【原创】]</a> 亿赛通 电子文档安全管理系统非授权访问的XXE漏洞</h1>
 								</div>
 								<div class=t_msgfontfix>
 								<table cellspacing=0 cellpadding=0><tbody><tr><td class=t_msgfont id=postmessage_1203024><br>
 								<br>
 								今年公司采购了一套亿赛通系统，闲来无事，给它做了一波审计，发现漏洞有点多，搞了好多个CNVD证书，此漏洞评分 ：5.0<br>
 								 版本号:CDG V5.6.2.126.139&nbsp;&nbsp;<br>
 								<br>
 								<br>
 								<br>
 								漏洞路径：/CDGServer3/software/getSoftWareIssuance<br>
 								<span style=position:absolute;display:none id=attach_167255></span>
 								<img src=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAz8AAAINCAIAAACf8lYGAAAgAElEQVR4nOy9eZAcR37v9/tlZh1993TPfR+YGdwnAZ4A7yV4LI9dySutJa2lF89Plv0UdoTD7y+HIxy2w//5yXpa6cnat1rtarVLcpdaHkuCyxMkQBwECIK4BpjBAHOffV9VlZk//9HAEAQxgwEIkiBZnz8munuqsrKysrq+/bsS77r7XvDx8fHx8fHx8fmKIC59QwD0ZXXk8wEv+evj4+Pj4+Pj8zXgY/UmETUgp6+VfiMEBciAxNfrvHx8fHx8fHy+sVxQbwoxqPWdpewKt/zldujG4iGeNoOHAuES418zYerj4+Pj4+PzzUQAgAYQRP9+fuzJ7MzXzXeKAIA/jzf+VbKV+S5UHx8fHx8fn68+AgAksvXl/KOFeWB4ygxnuGBfCw2nAZuk2+EU7yzlfhV1xwzLJP1ld8rHx8fHx8fH5zMhEJEQm6RnEM0L869rW09aIftroXIqyL5VSP2H2fMhrWqUHDVt9K1vPj4+Pj4+Pl9xhOtUXGSedAHAJZhValrKr4d6KyNLqeqJkJSe5zp+6JuPj4+Pj4/PVx1h2zYyZnomADDEsGlGbcvSXwf1ZjAWcA0AICLSSmulffXm4+Pj4+Pj8xVH1NTWOYwHyYNpYIxF4zU14bil1ZfdsRuAw3gYJM4gIhqWbdlB62thU/Tx8fHx8fH5JiO0UpqALhrbtNZaKf21UG+aQF88L7rIl9slHx8fHx8fH5/PiLj6JgAAsKB7EP3Afx8fHx8fHx+fLw229L99e5WPj4+Pj4+Pz03FUrY3rVQwHDEtKxavaW7rlJ7HuDh17EgmNcv5co12VYiUlJoLg12f5Q5Be1IjE/wqctPHx8fHx8fH5+vNoiJMK2VaVu/qdcVCHoiisYTnOZwbQohrtcYRkbBiDY12YX6m4LFrF3CkJY/U1ZuylMmWiF0i4IjoEmdutWOf0bcrETmR7x728fHx8fHxuTm5silLa20HAr1r1je1tIMmpZRSsvr3OhypWmkz2rZl26aGgCevJ+mTpCNaVq5Z2ZFATy0cnoi4YRimeaFLREIYpmldt6uXACqM1UovqLUv33x8fHx8fHxuTq6s3hAREGenJj/Y/+7E2HnTtBZtgLSUkgCIlOcpAiCtpNKApDzPdV3Xk0RApKWUUkrXcV1Parpk94u7eVJqrVV1M9dVmrSS1c0BQSup1BWkXzgatQMB0lqYZjgWx+t0zYJELDO+pZT/n+dGkspzrxYR6OPj4+Pj4+PzpXBlz6n0vLauFT39q13HYQwN0wJEwzQ5F4gfyxoiza1wbVAUMxllRBNJnk+ldSheZ8rp6VK8raM+FpS5mXPjs5pAuRCubV7ZVMcK8xMzMy4YjDRa0eZmuzA5nUe7qS5WKRS0aZrcTsTM6fFRN9C8si6YmRkbmb6CbkNE6XmlQiEQCnPODdN2KiXXca7Vc4oAFWSC9FO52b9MjZUYKyHLMw4aTNK+Dc7Hx8fHx8fnpuIK6o0APGbM54p8bExLRfBx6iljLFOqOGgQoYmkpccb27Zvaj6w+81C07bHN6ldL73B19y+Tg68J4y1a+uxgsGOtoh1cDBbMWL1K3pWpjFam1jVfOiNPQN5bWjGzb5b7tQf7RngrXd2mO8dmtmw8xZ7eqIQbNjY2zZZ0IFIw7re+K4Xjqsr+UMRsVIuM8YTDQ35dLpcKCC7NpsZAZQYb5Tun6Umv5ObRdAIxr/JTB4ORAbM4JAZkIgmaU6A4HtTfXx8fHx8fL58LldvCtBG/XB4ThQm1ICuRpkRgEAgAE20QRh2BE57oUNu3OSsmEqldUtjfTIVYLnZbKS+PWxXBgfdlbff1m9nzoxljVjLqu7J8WMOYWn4o/feOV3uuPX+e1asrjv39oRnG7nJva8dvf+x++73Zt5/9bVJp2crVs6feO+9mebvf/92feLXz56JPv4Ht7QmbEdfIZ6NiEzLsgKBXCrFBbeDoUq5tHzbGwFIxE3l/F/Oj62v5AEQkEW0ejw783hu7rwZOGvaR6zwwWBkxLAlogZkQJyAgV9FxcfHx8fHx+fL4XL1RgACaK2RCzE5XqbJot5SZ5xMS8ZgRYQDAEEliKpEbL9bYzIBhblzs86qpv6YO/bBpN3evT7qDe3K6lYqDZ889sHZlDk8jMW8Y7ZiqZAuFBQzUAFxLmwrForIfKpcLDM7FGNYKjtoYKWYS2crFuhUPpUqeCHBlAJmXKHrRCSECEejTrlcKhTMQCAUiWqtluk8rUq3R/Kpv5wfiysHkH/8P8YBqMMtdTjFe4qZdEYMm4H3gpFDgeiUMNNclJCbRIbvV/Xx8fHx8fH5wrmy51QzdixLAzm1vsaoaB4LwAdz3kxFba0zJQECeFTNDkCDVybGMrftvFUff+71idiqzRv5wPvF1NzA+dzm1tZuFWJhMTuQLXg6kGhZt/n2WMlu707OHtqTDWx47MHmE2/ts1ZvLhx+e0+05/Ydt751uMxN0xQMXG5blskZITdNgwFyIQS/3OaFjJUKBdepIGNepVIgQrgGQUUAtlZx5QF+2t+KgAgICJRQbqLsbinnJJs8YQUP2JETduisERg1bQ1gk/YrjPj4+Pj4+Ph8YSxa700REIFgAAACgSF6BIBwuX7ihjd/7sB7npzJQL50ZP9umssalnf+owOG7G1NJIvTw7O5rGdZ+/YerAsa8Sgb+WDfydPTlBCHD6YK2k5MDQyeOl2wstQVQ0gde79ccDij9IlDx0pFNHj+9AfHKsWKGh7Me3ky+IJOqmYtENEFSxui5ziw7HpvCMCJ/jVa2+VVfj8zBYwvuuHFBgXp9eX8+lJOMT5gBQfM0FE79EEgPCEsBAAgBuArOR8fHx8fH5/PlSuoNwRArdfFWdSAmaLsDOFQUbYEaGVMMNIcwUYtYGHdU8ZVfvD4Rygsk5dHBgaAGwY3TSoOfnhgQBNywzJtdFKjAzPnCEhrxg0zYGNhaiBDjOP4uOamycrTRz6cFAbX87PMMDjmzw1kmGEIVho5fZYZAorjKWRCfMr8dolWu9ZsUw7gIPuHmqYut3JLKXNRwNGVotou+QiRa7W6lFtdzD7FxZwwhqzgvkD0sB1OcaPEuOsvBevj4+Pj4+PzuXG5ekMACTgoQzZqsNAWdMIFFQSDwVkF1bodJugZbfEFQYPMtCwAIGCGaQIAAAEy07IvtkqA3DD5x9FrRMDEhW2rkgmFZQEAcLP6nhkmu9hm1QAoqi3dWCzSc8L8m0TL/y0rDa4DjBGgQlQIGlAjaEAFqBE1gEZUANXXClEDMAIGVCfd+/PpLaX8UTu8OxQbNSyEa/Hg+vj4+Pj4+PgsG3GxGMgFWcRJVzQ+XWqqukmrntLL/KUEwIEsuGIRj5sIIoJldDGo1ZFA+G8SLf/71NkRw/pZrKHCuAaQgBJRAUqG8oKkQwkoEeTCh4AKUSJqAo1IAArRl24+Pj4+Pj4+nx+CMcYYv1iDF7UwyDC4VkvvhgDXs+TVFwsxrsWigX2XEtTq1XDillghqNVPYw0W0IXhAAAgBEBaePvxh5/8BPBiTThfuvn4+Pj4+Ph8foiunj5XGI0oYZBMwVfUN1qJelN5X3bHbgAuNzqVA4BAwBARcbGMVA6gEf8x0dThVmJAJl2XNEXwlZuPj4+Pj4/P540IBEKCCzeWIGFEysUnP9pXNm12k/tEl4dGTOazoGRe2BOelFBylzyvUcQRZohy0f3Cuujj4+NzEUR2xZwpHx8fn8sQZ4cGNOCk9G4JRtdlpjvHh4H018WGRIBMGsaLtU3z4Wj4+ixqPj4+Pp8ziKCVrpRL3DC/7L74+Ph8BRAz05MAoBD/r6buzdFEm1PBr8uPPwRwEY8FYx9E4lFEduMzVn18fHxuAAxRSum6ziWp+j4+Pj6LIoQQACAAJoXxW7ORfy18pgsQggIUQExr3/Lm4+Nzc6IRSWuoZsr7fIFUB/xaa4XebBDRV/4cfK6Rj1eIMkkL0l8z+xQSmaS/HmF8Pj4+i0EEnDHOmK9+fJYPEZmGYZnGV3raEJFlmgbnX+mz
 								<div class=t_attach id=aimg_167255_menu style=position:absolute;z-index:301;opacity:1;left:202.203px;top:414.195px;display:none>
 								 (329.71 KB)
 								</div>
 								<br>
 								<br>
 								<br>
 								代码分析：<br>
 								通过检查web.xml文件，发现/software路径是可以非授权访问的，跟踪找到SoftwareDispatchController中的getSoftWareIssuance(HttpServletRequest request, HttpServletResponse response)方法，该方法的访问路径是/software/getSoftWareIssuance。通过分析该方法，发现调用了dom4j的DocumentHelper.parseText(toServerXML)来处理数据，同时dom4j的版本是1.6.1 存在XXE漏洞。<br>
 								<span style=position:absolute;display:none id=attach_167253></span>
 								<img src="data:image/png;base64,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
 								<div class=t_attach id=aimg_167253_menu style=position:absolute;display:none>
 								 (173.12 KB)
 								</div>
 								<br>
 								<span style=position:absolute;display:none id=attach_167249></span>
 								<img src="data:image/png;base64,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
 								<div class=t_attach id=aimg_167249_menu style=position:absolute;z-index:301;opacity:1;left:202.203px;top:2025.94px;display:none>
 								 (62.2 KB)
 								</div>
 								<br>
 								<span style=position:absolute;display:none id=attach_167251></span>
 								<img src=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAuUAAAHSCAIAAADEzyIhAAAgAElEQVR4nOzdd2BT19k/8O+5kjwkMyRbNh4YY8sDPAhmmU1YYYQkrBAgITRJm6RpRpPmJUnzZrRp31+bpBk0g6TNaoEsRkjYIyaAAeNggwd44oWXZMtbssY9vz8kGWNLNg7DAp7PP8j3Hp3z3HMvvo/OOb5ik6beCkIIIYQQNyb0dQCEEEIIIT2gfIUQQggh7k7a1wFcdVFtrfHGlgGipa8DIeQXahCkmV4+eZ7efR0IIYT0mRs8X/lNXcV9DdV9HQUhV8BnAwf9WxnY11EQQkjfkLY2NfR1DFdLnNlIyQq5Yayur9rHJWdknn0dCCGE9AGpvN+Avo7hahnZYLK9KJV57lcouxbwlsuvbUSE/BKTa6uC21oBTB7g0+Q/uJuSdbW11yooQgi5pm7k+aD2NSv7FcpPnA2kq3x9r21EhPxC91QUARhgMfd1IIQQ0jfo74MIIYQQ4u4oXyGEEEKIu6N8hRBCCCHujvIVQgghhLg7KYDI4XH5OVnzlyzvuGP7txv7KCT3wmWelqAIURkkevsAEAzNgr5CWlHIzG19HRohhBBys5BGDo+LGh6fn5PV15G4I6tviDlyFJfK2reIPgNFn4HWwEhZ/s+S2vI+jI0QQgi5eQhRw+OvXu0i95/+8PPL4vgVrTN22R8Xx/MrWadTVt8Q87BxHZOVdlwqMw8bZ/UNufxWOPdNWvabxx99eK7mqh+Ryxh8x6x4ZGmS79UNgPOIuVe/lUvEecTcR2ZFct7+4kpVeEXCI4QQ0smN9vyVASpVm8FoNLR23Ojp3esvXuEyT3PkKA7msgCYOXKU0KjtOjHEecS8R2doGANQsPfDnQUuKwGgHjd9dP3+tV8VwnVbVwTnvuPvWTxGxRw/Fu3+YE8+u7qNXqKOPcaL9v1zd2FfR+QuFP36m00XXWAenp4yD8+Wpsa+CokQQvqE9AZbp9JmNPoHBddUnO+Yslgtvf6yQ0tQRPvIChetLXmnDaUFoqnVQxXQPz5J0m8gAC6VWYIiZCU5Hd9ou/Vi37q1BYxz3/H3zI7M7y4tUCqVdfp6OPIJ5c/rus9vLlN7/sQ1s5747SOavR/uLGCs9sSGD09cfsL0yw6Ba2Y9MSu8YO+Hax2BrRxbvyG1F89pvTZd1yfM5raBvmpJaZ7tR4lEMtBXXV+r7duoCCHk2pN2WmZ7vTO2ttZUnrelLNJme8JhMff6qaCiMqj9dUveKUuj3nfKPCaTtdVUsg5fkysqg3BxvgI/lVKfvicfYGCs9thXe+EeYxidsIK97+rHrFzaQzp1tXEeMW/m0I6jUKxg74a+isb9mIxt9XVaL7nC9qOXXFFfqzW10VpvQshNp3fzQfFLn5+k/fcHyTUij13+4h347q9fZTExbvErE3XrPkyuRNzyF++IYQxAzeF/fZBc43hf3LI/2ref3fqXr7Iu3B0Dpv364Yl1W177NpOx+KXPL8S2V77G8hcnaL/Li75zgj9jZ7f+ZSOWvHpXdJc6XWpPWRRGPX7pB1HupWh/bSgt8J08X/BSAPAKHOKqmJ2uTq+cMSYydWfBxRV2nPJwzMVE3vabOeEMWPLYyOoa5j+IMcx65HejTqboR8bUb9qQWts+WrOzgHHNrMdH1X/5ZarWb+zKpSN9O8w3OQYY9mPmjAh9+pdfpmqhaW+u9udvnQ9X6IqK9Is1kcjTj1m5dOCJD/bkM+Y3dunyUar2IPPg115zpxku7jumYxg78h0tznrkd6NOdo1h/XEAQMTsx+8OR/u8T2R4hD79y3wngztOe4zziHmPJupP1o8ZFe6odmDHdjduLIxcvsRVV3Q/C9axRVunde1YHWNOC9uPzrbr4p6xdVenju3a1a6iMhnbjIYW22tjayslK4SQm1Pv5oNqtDq1Wg3UID5GpdPBLwCoGTEsSpt7qBJxy1+coP34r1/VMJH7z3zkwWW6v27MBIDoO2O2vPbXrxgT4xa/cueS+MxvMx2/mquTP96ifn7SrQGndJMXqlLWfZgFxAF+kybmrXvtr5XxS16964+v5H736mubRP+pj/16cvyP3566hDgZBwO/oitCLnUdJWOFO/aFPzHrkd/NvHATst3blCc3rU2tBcA1sx5/dDY+2JO/+yPc9psx+k0dbo3rdhYwv7FhE5QDgVpEhiv1eqj8gNqoiKF15zZp4Td+NPZ8sE7HGNfMenzm7Mj8PbbZgoiZ4bs/WLeTMQ7NvEcT9d+sW1trT2Xm1q3bkX8JB+k7ZnZi/a73v7bfOxmzHfeFmi+02DmMqPw9Oz6obz8EDk3HQwYADASUo5Un136wl/uOWbk0Mcm34KirSFz0WB5wcSXTxxd+fVG7zDeyc1e4qqdri847rb02XJysdDk62y5fJyfIb2ynjnXS1d2dmPa9tJ6XEHKTkr4S3MOIxSvn/dtfV+bkaX8dE8+zMEyVuyVFvXBYwI9Qq3S5B6sRPzmGqWN+88fJjsI1fgG2F7nfORKUzEOHJz44PB6ZHf56+tTX24a/+OAr0B3++Ntq+w1Sd3hLcjVjyDx79k6V9mAWwFCtq0OUOgCo7uGQvLzl6qDgmorzl7MmkRlbuI/9DuQdGtF46mj/EeOZRNZWXSpR9JepAtqLOXlvwd61BfAbu3T5bx+5reMownGd/baUfzJt1GJNJPILur4bALSFxXVLwyN5ASIGFu07qZwZ7nccvgP1RWk6xtix3bV+4+5+3PHRvP1dhfscn9EjwzVMhbsfGePYVavyc3Gger2+w0+6Oj1G3vbo3b7ffH2s9sId9ELNFyKvdRWGXadDdjSXllYAMOiKivRhLkJy9nZHu3n5l1RJx65wXU/nFl112oXaejg6AGDMWc907VgXXd2Vh6enl+OLxL3kCg9PTxpiIYTchKS7z5tvC5YB2H3ePHmQVC7p9nNe9Zlc3Z3qgDi1Ki+5WhuLCbHxiEbe5mrAH1x7ZN2HydUX/Qb3d1nV1eHlLW9fb9u+bEUqc/I3yd0T9BWiI1/xiR7ZnJtee2i7aDZ5qgP7xSd1LOaqBl3qN+8ej5j36Iy5moIdTvZfnCh0fnNRkX66r59GObD4hK5eg0RNJMJRvEcH7jdm5dKROLlp7Qe13HfMyqUDnVbA6052nLwAAHT5MurIxNEo/lIHOJIZxgp3fljIue/4ex7+nVKf9s3XR3XOA7RNefQYRs/yiwpnJmr8UnU9r6/ttsd6wWU9l9RpPXHaM1079lht1y1O/ut5eHoO9FUbHettjYYW23pbSlkIITcbIcLH/kj+CB9hc4m5sNHaXWlWk52L6IUTout01bbXE6OQe8Y2FpLrN2Ga42Eu8UsvPCIlelic7UXgrXdO8svLyYToP/XRP/56uj8HMOLuO1RH/r3uCCYtnBZw2Y+v8PTy6vTHQQAk0l7/2ba0opBZHKt0meATM0o9e1nA/PsGjp0p8faxb7aYpRWd//KW+45ZcVtEhw16vR7ILypUjpw9zpEXRCaORnGBi1QAAGO1BecQPjMxor5OZ3s9KgzninSMQTlQpU/fc1wHQB0RpnL6/vyiQuXIMZGO1m5z8lwQrpn1+MyBafsuuj1z3zFJGs5Y7dEvN6XplUqlfXtEhMb2Qj1u+mjluYJ89BxGhxg4j0ga6/zGz1jhiZMYvfTu9ueycM2sFWN9e9tjLl16PZfSae0Pqunm6Jz1TNeOddXVncg8POtrtVar/X+l1WKtr9PKPDx73xGEEHJ9k2oGSGyvNAMkAz2Eb0vaIvpLunlDZU4eJk7IPZIFsMqcPEyMyt1SDTCBZW/82O+xX7/w8l2OdbWO1Q+5iHn5xTsBcJ5rW1rbXlv80ucXqlLWfV1die8ORz/48N26V76+rONp0Nd13dhmMMCrdwMAzNwmy//ZPGycq0ewMHBZ/s9dH77Cak/s0S99/NGZth8L9n54rJYxVrjjA8x7dPHjo9pXfXb6HG/LUfTL2xerFhYjcWThzwUA0xYWIzGsaJ8OYLYZjeW/TQRQW1Tk5Ghta2i+Ua1c+vDjsxxLPh3nQjPrkcdnAbax
 								<div class=t_attach id=aimg_167251_menu style=position:absolute;display:none>
 								 (88.77 KB)
 								</div>
 								<br>
 								<br>
 								漏洞复现：<br>
 、通过脚本生成POC：<br>
 								<span style=position:absolute;display:none id=attach_167252></span>
 								<img src="data:image/png;base64,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
 								<div class=t_attach id=aimg_167252_menu style=position:absolute;z-index:301;opacity:1;left:202.203px;top:3800.54px;display:none>
 								 (92.86 KB)
 								</div>
 								 <br>
 								 <br>
 、把加密后的POC放到POST请求包中：<br>
 								POST请求包：/CDGServer3/software/getSoftWareIssuance<br>
 								<span style=position:absolute;display:none id=attach_167250></span>
 								<img src="data:image/png;base64,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
 								<div class=t_attach id=aimg_167250_menu style=position:absolute;z-index:301;opacity:1;left:202.203px;top:4510.34px;display:none>
 								 (57.6 KB)
 								</div>
 								<br>
 、Dnslog服务产生了一条记录：<br>
 								<span style=position:absolute;display:none id=attach_167248></span>
 								<img src=data:image/png;base64,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
 								<div class=t_attach id=aimg_167248_menu style=position:absolute;z-index:301;opacity:1;left:202.203px;top:4852.34px;display:none>
 								 (22.83 KB)
 								</div>
 								 TCV值0
 								</table>
 								</div>
 								</div>
 								</div>
 								</tr>
 								</table>
 								</div>
 								</div>
 								<div id=f_post class="mainbox viewthread" style=display:none!important>
 								<form method=post id=fastpostform action="post.php?action=reply&amp;fid=52&amp;tid=72889&amp;extra=page%3D1&amp;replysubmit=yes&amp;infloat=yes&amp;handlekey=fastpost" style=display:none!important>
 								<table cellspacing=0 cellpadding=0 style=display:none!important>
 								<tbody style=display:none!important><tr style=display:none!important>
 								<td class=postcontent style=display:none!important>
 								<div class=editor_tb style=display:none!important>
 								</div>
 								</td>
 								</tr>
 								</table>
 								</form>
 								</div>
 								</div>
 								<div id=immersive-translate-popup style=color-scheme:initial;forced-color-adjust:initial;mask:initial;math-depth:initial;position:initial;position-anchor:initial;text-size-adjust:initial;appearance:initial;color:initial;font:initial;font-palette:initial;font-synthesis:initial;position-area:initial;text-orientation:initial;text-rendering:initial;text-spacing-trim:initial;-webkit-font-smoothing:initial;-webkit-locale:initial;-webkit-text-orientation:initial;-webkit-writing-mode:initial;writing-mode:initial;zoom:initial;accent-color:initial;place-content:initial;place-items:initial;place-self:initial;alignment-baseline:initial;anchor-name:initial;anchor-scope:initial;animation-composition:initial;animation:initial;app-region:initial;aspect-ratio:initial;backdrop-filter:initial;backface-visibility:initial;background:initial;background-blend-mode:initial;baseline-shift:initial;baseline-source:initial;block-size:initial;border-block:initial;border:initial;border-radius:initial;border-collapse:initial;border-end-end-radius:initial;border-end-start-radius:initial;border-inline:initial;border-start-end-radius:initial;border-start-start-radius:initial;inset:initial;box-decoration-break:initial;box-shadow:initial;box-sizing:initial;break-after:initial;break-before:initial;break-inside:initial;buffered-rendering:initial;caption-side:initial;caret-color:initial;clear:initial;clip:initial;clip-path:initial;clip-rule:initial;color-interpolation:initial;color-interpolation-filters:initial;color-rendering:initial;columns:initial;column-fill:initial;gap:initial;column-rule:initial;column-span:initial;contain:initial;contain-intrinsic-block-size:initial;contain-intrinsic-size:initial;contain-intrinsic-inline-size:initial;container:initial;content:initial;content-visibility:initial;counter-increment:initial;counter-reset:initial;counter-set:initial;cursor:initial;cx:initial;cy:initial;d:initial;display:none!important;dominant-baseline:initial;empty-cells:initial;field-sizing:initial;fill:initial;fill-opacity:initial;fill-rule:initial;filter:initial;flex:initial;flex-flow:initial;float:initial;flood-color:initial;flood-opacity:initial;grid:initial;grid-area:initial;height:initial;hyphenate-character:initial;hyphenate-limit-chars:initial;hyphens:initial;image-orientation:initial;image-rendering:initial;initial-letter:initial;inline-size:initial;inset-block:initial;inset-inline:initial;interpolate-size:initial;isolation:initial;letter-spacing:initial;lighting-color:initial;line-break:initial;list-style:initial;margin-block:initial;margin:initial;margin-inline:initial;marker:initial;mask-type:initial;math-shift:initial;math-style:initial;max-block-size:initial;max-height:initial;max-inline-size:initial;max-width:initial;min-block-size:initial;min-height:initial;min-inline-size:initial;min-width:initial;mix-blend-mode:initial;object-fit:initial;object-position:initial;object-view-box:initial;offset:initial;opacity:initial;order:initial;orphans:initial;outline:initial;outline-offset:initial;overflow-anchor:initial;overflow-clip-margin:initial;overflow-wrap:initial;overflow:initial;overlay:initial;overscroll-behavior-block:initial;overscroll-behavior-inline:initial;overscroll-behavior:initial;padding-block:initial;padding:initial;padding-inline:initial;page:initial;page-orientation:initial;paint-order:initial;perspective:initial;perspective-origin:initial;pointer-events:initial;position-try:initial;position-visibility:initial;quotes:initial;r:initial;resize:initial;rotate:initial;ruby-align:initial;ruby-position:initial;rx:initial;ry:initial;scale:initial;scroll-behavior:initial;scroll-margin-block:initial;scroll-margin:initial;scroll-margin-inline:initial;scroll-padding-block:initial;scroll-padding:initial;scroll-padding-inline:initial;scroll-snap-align:initial;scroll-snap-stop:initial;scroll-snap-type:initial;scroll-timeline:initial;scrollbar-color:initial;scrollbar-gutter:initial;scrollbar-width:initial;shape-image-threshold:initial;shape-margin:initial;shape-outside:initial;shape-rendering:initial;size:initial;speak:initial;stop-color:initial
 								 * Pico.css v1.5.6 (https://picocss.com)
 								 * Copyright 2019-2022 - Licensed under MIT
 								 */#mount{--font-family:system-ui,-apple-system,"Segoe UI","Roboto","Ubuntu","Cantarell","Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--line-height:1.5;--font-weight:400;--font-size:16px;--border-radius:0.25rem;--border-width:1px;--outline-width:3px;--spacing:1rem;--typography-spacing-vertical:1.5rem;--block-spacing-vertical:calc(var(--spacing)*2);--block-spacing-horizontal:var(--spacing);--grid-spacing-vertical:0;--grid-spacing-horizontal:var(--spacing);--form-element-spacing-vertical:0.75rem;--form-element-spacing-horizontal:1rem;--nav-element-spacing-vertical:1rem;--nav-element-spacing-horizontal:0.5rem;--nav-link-spacing-vertical:0.5rem;--nav-link-spacing-horizontal:0.5rem;--form-label-font-weight:var(--font-weight);--transition:0.2s ease-in-out;--modal-overlay-backdrop-filter:blur(0.25rem)}@media (min-width:576px){#mount{--font-size:17px}}@media (min-width:768px){#mount{--font-size:18px}}@media (min-width:992px){#mount{--font-size:19px}}@media (min-width:1200px){#mount{--font-size:20px}}@media (min-width:576px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*2.5)}}@media (min-width:768px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*3)}}@media (min-width:992px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*3.5)}}@media (min-width:1200px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*4)}}@media (min-width:576px){article{--block-spacing-horizontal:calc(var(--spacing)*1.25)}}@media (min-width:768px){article{--block-spacing-horizontal:calc(var(--spacing)*1.5)}}@media (min-width:992px){article{--block-spacing-horizontal:calc(var(--spacing)*1.75)}}@media (min-width:1200px){article{--block-spacing-horizontal:calc(var(--spacing)*2)}}dialog>article{--block-spacing-vertical:calc(var(--spacing)*2);--block-spacing-horizontal:var(--spacing)}@media (min-width:576px){dialog>article{--block-spacing-vertical:calc(var(--spacing)*2.5);--block-spacing-horizontal:calc(var(--spacing)*1.25)}}@media (min-width:768px){dialog>article{--block-spacing-vertical:calc(var(--spacing)*3);--block-spacing-horizontal:calc(var(--spacing)*1.5)}}a{--text-decoration:none}a.secondary,a.contrast{--text-decoration:underline}small{--font-size:0.875em}h1,h2,h3,h4,h5,h6{--font-weight:700}h1{--font-size:2rem;--typography-spacing-vertical:3rem}h2{--font-size:1.75rem;--typography-spacing-vertical:2.625rem}h3{--font-size:1.5rem;--typography-spacing-vertical:2.25rem}h4{--font-size:1.25rem;--typography-spacing-vertical:1.874rem}h5{--font-size:1.125rem;--typography-spacing-vertical:1.6875rem}[type="checkbox"],[type="radio"]{--border-width:2px}[type="checkbox"][role="switch"]{--border-width:3px}thead th,thead td,tfoot th,tfoot td{--border-width:3px}:not(thead,tfoot)>*>td{--font-size:0.875em}pre,code,kbd,samp{--font-family:"Menlo","Consolas","Roboto Mono","Ubuntu Monospace","Noto Mono","Oxygen Mono","Liberation Mono",monospace,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"}kbd{--font-weight:bolder}[data-theme="light"],#mount:not([data-theme="dark"]){--background-color:#fff;--background-light-green:#F5F7F9;--color:hsl(205deg,20%,32%);--h1-color:hsl(205deg,30%,15%);--h2-color:#24333e;--h3-color:hsl(205deg,25%,23%);--h4-color:#374956;--h5-color:hsl(205deg,20%,32%);--h6-color:#4d606d;--muted-color:hsl(205deg,10%,50%);--muted-border-color:hsl(205deg,20%,94%);--primary:hsl(195deg,85%,41%);--primary-hover:hsl(195deg,90%,32%);--primary-focus:rgba(16,149,193,0.125);--primary-inverse:#fff;--secondary:hsl(205deg,15%,41%);--secondary-hover:hsl(205deg,20%,32%);--secondary-focus:rgba(89,107,120,0.125);--secondary-inverse:#fff;--contrast:hsl(205deg,30%,15%);--contrast-hover:#000;--contrast-focus:rgba(89,107,120,0.125);--contrast-inverse:#fff;--mark-background-color:#fff2ca;--mark-color:#543a26;--ins-color:#388e3c;--del-color:#c62828;--blockquote-border-color:var(--muted-border-color);--blockquote-footer-color:var(--muted-c