| Titel | http://www.jiusi.net/ jiusiOA n/a Arbitrary file upload vulnerability |
|---|
| Beschreibung | There is an arbitrary file write vulnerability in the OfficeServer interface of Jiusi OA. An attacker can exploit this vulnerability to write any jsp file without authorization, thereby obtaining server permissions |
|---|
| Quelle | ⚠️ https://github.com/rooboot501/my-project/blob/main/jiousi.md |
|---|
| Benutzer | 2075463979 (UID 91655) |
|---|
| Einreichung | 02.11.2025 16:38 (vor 6 Monaten) |
|---|
| Moderieren | 15.11.2025 15:59 (13 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 332583 [Jiusi OA bis 20251102 OfficeServer Interface OfficeServer?isAjaxDownloadTemplate=false FileData erweiterte Rechte] |
|---|
| Punkte | 16 |
|---|