| Titre | http://www.jiusi.net/ jiusiOA n/a Arbitrary file upload vulnerability |
|---|
| Description | There is an arbitrary file write vulnerability in the OfficeServer interface of Jiusi OA. An attacker can exploit this vulnerability to write any jsp file without authorization, thereby obtaining server permissions |
|---|
| La source | ⚠️ https://github.com/rooboot501/my-project/blob/main/jiousi.md |
|---|
| Utilisateur | 2075463979 (UID 91655) |
|---|
| Soumission | 02/11/2025 16:38 (il y a 11 mois) |
|---|
| Modérer | 15/11/2025 15:59 (13 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 332583 [Jiusi OA jusqu’à 20251102 OfficeServer Interface OfficeServer?isAjaxDownloadTemplate=false FileData élévation de privilèges] |
|---|
| Points | 16 |
|---|