万户OA xfire xml实体注入漏洞

Follow 0

Basic Fields

SSV ID:: SSV-91444

Find Time:: Unknown

Submit Time:: 2016-05-04

Level:

Category:: XML 注入

Component:: ezOFFICE
whir

Author:: Unknown

Submitter:: Knownsec

CVE-ID：: Add

CNNVD-ID：: Add

CNVD-ID：: Add

ZoomEye Dork：: Add

Source

Detail

Contributor Knownsec Got 2.35KB

etc 16 exchange

PoC (pocsuite 插件) (pocsuite 插件)

Contributor Gh05t totally have 2KB

Login to exchange

have 1 Exchange

Reference Linking

http://www.wooyun.org/bugs/wooyun-2016-0173342

Solutions

Temp Solutions

Unavailable Temp Solutions

Official Solution

Unavailable Official solution

Defense Solutions

Unavailable Defense Solutions

Unavailable Comments

※Any content provided by this site, only to learn the code and services, not for illegal purposes