| Titolo | http://www.jiusi.net/ jiusiOA n/a Arbitrary file upload vulnerability |
|---|
| Descrizione | There is an arbitrary file write vulnerability in the OfficeServer interface of Jiusi OA. An attacker can exploit this vulnerability to write any jsp file without authorization, thereby obtaining server permissions |
|---|
| Fonte | ⚠️ https://github.com/rooboot501/my-project/blob/main/jiousi.md |
|---|
| Utente | 2075463979 (UID 91655) |
|---|
| Sottomissione | 02/11/2025 16:38 (11 mesi fa) |
|---|
| Moderazione | 15/11/2025 15:59 (13 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 332583 [Jiusi OA fino a 20251102 OfficeServer Interface OfficeServer?isAjaxDownloadTemplate=false FileData escalationi di privilegi] |
|---|
| Punti | 16 |
|---|