| عنوان | http://www.jiusi.net/ jiusiOA n/a Arbitrary file upload vulnerability |
|---|
| الوصف | There is an arbitrary file write vulnerability in the OfficeServer interface of Jiusi OA. An attacker can exploit this vulnerability to write any jsp file without authorization, thereby obtaining server permissions |
|---|
| المصدر | ⚠️ https://github.com/rooboot501/my-project/blob/main/jiousi.md |
|---|
| المستخدم | 2075463979 (UID 91655) |
|---|
| ارسال | 02/11/2025 04:38 PM (11 أشهر منذ) |
|---|
| الاعتدال | 15/11/2025 03:59 PM (13 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 332583 [Jiusi OA حتى 20251102 OfficeServer Interface OfficeServer?isAjaxDownloadTemplate=false FileData تجاوز الصلاحيات] |
|---|
| النقاط | 16 |
|---|