Security Analysis of Zhiyuan OA Unauthorized Access and File Upload Vulnerabilities
Vulnerability Reproduction Process The vulnerability reproduction consists of three main components: 1.1 Unauthorized Access Detection Following the analysis by unicodeSec, we can identify the vulnerability by making a request to the endpoint eyon/thirdpartyController.do.css/…;/ajax.do. If the respo...