泛微OA E-Cology WorkflowRequestServlet 存在XXE

棉花糖

2025年5月9日发布

088526

fofa:

body = "/wui/common/css/w7OVFont_wev8.css" || header="testBanCookie"
    || body="/wui/common/css/w7OVFont.css" || body="/js/ecology8" || body="alert('高效源于协同')"
    || body="wui/common/css/w7OVFont_wev8.css"||(body="weaver"&&body="ecology") ||
    (header="ecology_JSessionId"&&body="login/Login.jsp")||body="/wui/index.html"||body="jquery_wev8"||
    body="index_wev8"||title="e-cology运维管理平台"||body="/build/passport/static/js/lib.js"
    && body="/build/ecodesdk/static/js/lib.js"||(body="login.php"&&body="eoffice")||body="/general/login/index.php"