| Title | http://www.jiusi.net/ jiusiOA n/a Arbitrary file upload vulnerability |
|---|
| Description | There is an arbitrary file write vulnerability in the OfficeServer interface of Jiusi OA. An attacker can exploit this vulnerability to write any jsp file without authorization, thereby obtaining server permissions |
|---|
| Source | ⚠️ https://github.com/rooboot501/my-project/blob/main/jiousi.md |
|---|
| User | 2075463979 (UID 91655) |
|---|
| Submission | 11/02/2025 16:38 (6 months ago) |
|---|
| Moderation | 11/15/2025 15:59 (13 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 332583 [Jiusi OA up to 20251102 OfficeServer Interface OfficeServer?isAjaxDownloadTemplate=false FileData unrestricted upload] |
|---|
| Points | 16 |
|---|