WukongCRM 0.5.1 /App/Lib/Action/WeixinAction.class.php XXE漏洞

Follow 3

Basic Fields

SSV ID:: SSV-89428

Find Time:: Unknown

Submit Time:: 2015-09-15

Level:

Category:: XML 注入

Component:: WukongCRM
(0.5.1)

Author:: Unknown

Submitter:: RickGray

CVE-ID：: Add

CNNVD-ID：: Add

CNVD-ID：: Add

ZoomEye Dork：: Add

Source

Detail

Contributor RickGray Got 0KB

Unopen

have 0 exchange

PoC (pocsuite 插件) (pocsuite 插件)

Contributor RickGray totally have 0KB

Unopen

have 0 Exchange

Reference Linking

http://wooyun.org/bugs/wooyun-2015-0135088

Solutions

Temp Solutions

Unavailable Temp Solutions

Official Solution

Unavailable Official solution

Defense Solutions

Unavailable Defense Solutions

All Comments (2)

anonymous 2015-09-15

为什么没有公开啊？
- anonymous
  这是乌云上未公开漏洞啊，看奖励，这是提交了poc了？先关注，期待公开
Reply 0 0
2F
anonymous 2015-09-15

膜拜
Reply 0 0
1F

※Any content provided by this site, only to learn the code and services, not for illegal purposes