{
  "Name": "Landray OA custom.jsp RCE",
  "Description": "Landray OA office system is an oa office tool for instant office communication. Lanling oa has an arbitrary code execution vulnerability, which can be exploited by an attacker to gain control of the server",
  "Product": "Landray OA",
  "Homepage": "https://www.landray.com.cn",
  "DisclosureDate": "2021-06-24",
  "Author": "go0p",
  "GobyQuery": "app=\"landray-OA\"",
  "Level": "3",
  "Impact": "",
  "Recommandation": "",
  "References": [
    "https://www.cnblogs.com/0day-li/p/14637653.html"
  ],
  "HasExp": true,
  "ExpParams": [
    {
      "Name": "cmd",
      "Type": "input",
      "Value": "dir"
    }
  ],
  "ExpTips": {
    "Type": "",
    "Content": ""
  },
  "ScanSteps": null,
  "ExploitSteps": null,
  "Tags": [
    "rce","getshell"
  ],
  "CVEIDs": null,
  "CVSSScore": null,
  "AttackSurfaces": {
    "Application": ["landray-OA"],
    "Support": null,
    "Service": null,
    "System": null,
    "Hardware": null
  }
}