泛微 E-Officee /building/config/config.ini 信息泄露漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/0day404/HV-2024-POC/blob/main/%E6%B3%9B%E5%BE%AEE-Office-jx2_config%E5%AD%98%E5%9C%A8%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E.md
• https://rivers.chaitin.cn/blog/cqli76h0lnec5jjug6hg
• https://cn-sec.com/archives/2474980.html
• https://www.cnblogs.com/pursue-security/p/17673633.html
• https://github.com/Threekiii/Awesome-POC/blob/master/OA%E4%BA%A7%E5%93%81%E6%BC%8F%E6%B4%9E/%E6%B3%9B%E5%BE%AEOA%20E-Office%20mysql_config.ini%20%E6%95%B0%E6%8D%AE%E5%BA%93%E4%BF%A1%E6%81%AF%E6%B3%84%E6%BC%8F%E6%BC%8F%E6%B4%9E.md
• https://www.ddpoc.com/DVB-2023-5377.html
• https://cn-sec.com/archives/3005370.html
• https://github.com/adysec/POC/blob/main/wpoc/%E6%B3%9B%E5%BE%AEOA/%E6%B3%9B%E5%BE%AEe-office%20%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE.md

Related Vulnerabilities

• 泛微e-office /iWebOffice/Signature/SignatureDel.php SQL 注入漏洞
• 泛微e-office /E-mobile/App/System/UserSelect/dept.php 未授权访问漏洞
• 泛微 E-Office /E-mobile/create/ajax_do.php 存在SQL注入漏洞
• 泛微 E-Office /E-mobile/diarydo.php存在SQL注入漏洞
• 泛微E-Office /general/crm/record/detail.php SQL 注入漏洞
• 泛微e-office /webservice/calendar/cale.wsdl.php SQL 注入漏洞
• PoCe-office10-atuh-file-phar-deserialization-rce: 泛微E-office 10 atuh-file存在phar反序列化漏洞
• PoCeoffice-v9-mobile-upload-save-fileupload: 泛微 E-Office v9.5 mobile_upload_save 任意文件上传漏洞
• 泛微e-office /webservice-json/email/email.wsdl.php SQL 注入漏洞