| Название | http://www.jiusi.net/ jiusiOA n/a Arbitrary file upload vulnerability |
|---|
| Описание | There is an arbitrary file write vulnerability in the OfficeServer interface of Jiusi OA. An attacker can exploit this vulnerability to write any jsp file without authorization, thereby obtaining server permissions |
|---|
| Источник | ⚠️ https://github.com/rooboot501/my-project/blob/main/jiousi.md |
|---|
| Пользователь | 2075463979 (UID 91655) |
|---|
| Представление | 02.11.2025 16:38 (6 месяцы назад) |
|---|
| Модерация | 15.11.2025 15:59 (13 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 332583 [Jiusi OA до 20251102 OfficeServer Interface OfficeServer?isAjaxDownloadTemplate=false FileData эскалация привилегий] |
|---|
| Баллы | 16 |
|---|