| 标题 | http://www.jiusi.net/ jiusiOA n/a Arbitrary file upload vulnerability |
|---|
| 描述 | There is an arbitrary file write vulnerability in the OfficeServer interface of Jiusi OA. An attacker can exploit this vulnerability to write any jsp file without authorization, thereby obtaining server permissions |
|---|
| 来源 | ⚠️ https://github.com/rooboot501/my-project/blob/main/jiousi.md |
|---|
| 用户 | 2075463979 (UID 91655) |
|---|
| 提交 | 2025-11-02 16時38分 (11 月前) |
|---|
| 管理 | 2025-11-15 15時59分 (13 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 332583 [Jiusi OA 直到 20251102 OfficeServer Interface OfficeServer?isAjaxDownloadTemplate=false FileData 权限提升] |
|---|
| 积分 | 16 |
|---|