WanHu ezoffice is vulnerable to arbitrary file upload due to lax control.

The OA system does not strictly control the upload of images for publishing announcements, so any files can be uploaded!
Detailed description:
Open the upload image page in the announcement to view the url as follows:
Http://www.bkjia.com/defaultroot/public/jsp/multiupload. jsp? Path = information & fileName = infoPicName & saveName = infoPicSaveName & tableName = infoPicTable & fileMaxSize = 0 & fileMaxNum = 0 & fileType = gif, jpg, bmp, jpeg, png & fileMinWidth = 0 & fileMinHeight = 0 & fileMaxWidth = 0 & fileMaxHeight = 0
 
 
Add. jsp To The fileType parameter in the url and refresh it to upload the jsp file.



 
Solution:
You don't have to pay this! Despise the upload program!
Author SZn