daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/vulnerabilities/seeyon/zhiyuan-file-upload.yaml

36 lines
1.0 KiB
YAML
Raw Normal View History

Create zhiyuan-file-upload.yaml Zhiyuan OA is a set of office coordinating management software. Recently, Qianxin CERT monitors the relevant vulnerability information of the long OA. Since there is an unauthorized access in some interfaces, and some functions are insufficient, the attacker can upload malicious script files without logging in, so that there is no need to log in. Zhiyuan OA official has provided patches for this vulnerability. In view of the large vulnerability harm, it is recommended that users apply patch updates as soon as possible. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-02 02:07:14 +00:00
id: zhiyuan-file-upload
info:
Enhancement: vulnerabilities/other/zhiyuan-file-upload.yaml by mp
2022-02-04 15:54:04 +00:00
name: Zhiyuan OA Arbitrary File Upload Vulnerability
Create zhiyuan-file-upload.yaml Zhiyuan OA is a set of office coordinating management software. Recently, Qianxin CERT monitors the relevant vulnerability information of the long OA. Since there is an unauthorized access in some interfaces, and some functions are insufficient, the attacker can upload malicious script files without logging in, so that there is no need to log in. Zhiyuan OA official has provided patches for this vulnerability. In view of the large vulnerability harm, it is recommended that users apply patch updates as soon as possible. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-02 02:07:14 +00:00
author: gy741
severity: critical
Enhancement: vulnerabilities/other/zhiyuan-file-upload.yaml by mp
2022-02-04 15:54:04 +00:00
description: A vulnerability in Zhiyuan OA allows remote unauthenticated attackers to upload arbitrary files to the remote server and cause execute arbitrary code to be executed.
templateman update
2023-10-14 11:27:55 +00:00
remediation: Apply the appropriate patch.
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
reference:
- https://www.programmersought.com/article/92658169875/
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
templateman update
2023-10-14 11:27:55 +00:00
tags: zhiyuan,rce,fileupload,seeyon,intrusive
Create zhiyuan-file-upload.yaml Zhiyuan OA is a set of office coordinating management software. Recently, Qianxin CERT monitors the relevant vulnerability information of the long OA. Since there is an unauthorized access in some interfaces, and some functions are insufficient, the attacker can upload malicious script files without logging in, so that there is no need to log in. Zhiyuan OA official has provided patches for this vulnerability. In view of the large vulnerability harm, it is recommended that users apply patch updates as soon as possible. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-02 02:07:14 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Create zhiyuan-file-upload.yaml Zhiyuan OA is a set of office coordinating management software. Recently, Qianxin CERT monitors the relevant vulnerability information of the long OA. Since there is an unauthorized access in some interfaces, and some functions are insufficient, the attacker can upload malicious script files without logging in, so that there is no need to log in. Zhiyuan OA official has provided patches for this vulnerability. In view of the large vulnerability harm, it is recommended that users apply patch updates as soon as possible. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-08-02 02:07:14 +00:00
- method: GET
path:
- "{{BaseURL}}/seeyon/thirdpartyController.do.css/..;/ajax.do"
matchers-condition: and
matchers:
- type: word
words:
- "java.lang.NullPointerException:null"
- type: word
words:
- "text/html"
part: header
- type: status
status:
- 200
TemplateMan Update [Fri Oct 20 11:41:12 UTC 2023] :robot:
2023-10-20 11:41:13 +00:00
# digest: 490a0046304402200c6b8d0165c33a47c7bc941254b92437d5aeea60068599ffc89e8a0d00716957022005e23699f52f16bf99099ba35dd6030ad2aa48f22d81aadc742957bd35b2be44:922c64590222798bb761d5b6d8e72950