OA-tongda-RCE

OA-tongda-RCE | Office Anywhere Web-based Intelligent Office System Backend Getshell No Authentication Required 1. Arbitrary file upload vulnerability /ispirit/im/upload.php 2. Local file inclusion vulnerability /ispirit/interface/gateway.php Command Execution Bypass: exec"cmd /c ".$command;...

双杨OA /ispirit/go.php 文件 LOGIN_UID 参数SQL注入漏洞

No description provided by source...