ecology/泛微

作者: wansui | 来源:发表于2017-11-09 14:57 被阅读0次

近来，公司上线新oa，找了一堆漏洞，记之。

注入

问题出再

***/services/MobileService?wsdl

**.**.**.**/weaver/weaver.email.FileDownloadLocation?download=1&fileid=-2

**.**.**.**/pweb/careerapply/HrmCareerApplyPerEdit.jsp?id=1

**.**.**.**/pweb/careerapply/HrmCareerApplyPerView.jsp?id=1

**.**.**.**/pweb/careerapply/HrmCareerApplyWorkEdit.jsp?id=1

**.**.**.**/pweb/careerapply/HrmCareerApplyWorkView.jsp?id=1

**.**.**.**/web/careerapply/HrmCareerApplyPerEdit.jsp?id=1

**.**.**.**/web/careerapply/HrmCareerApplyPerView.jsp?id=1

**.**.**.**/web/careerapply/HrmCareerApplyWorkEdit.jsp?id=1

**.**.**.**/web/careerapply/HrmCareerApplyWorkView.jsp?id=1

**.**.**.**/meeting/Maint/MeetingTypeCheck.jsp?typename=aaa111&id=1

**.**.**.**/page/element/news/more.jsp?ebaseid=news&eid=1123

**.**.**.**/web/careerapply/HrmCareerApplyAdd.jsp?careerid=1