JEECMS任意命令执行漏洞（涉及大量案例，Administrator权限）

### 简要描述： JEECMS任意命令执行漏洞（涉及大量案例，Administrator权限） ### 详细说明： 谷歌搜索：inurl:jeecms/ArtiSearch.do 涉及大量案例 ``` http://www.wwxzfw.gov.cn/jeecms/ArtiSearch.do?count=10&searchKey=a%27+and+1%3D1&chnlId= http://www.cnfamily.com/family/jeecms/ArtiSearch.do?count=10&searchKey=%C1%BD%BB%E1 http://www.qsng.cn/jeecms/ArtiSearch.do?searchKey=%CA%D3%C1%A6 http://www.gykj.gov.cn/jeecms/ArtiSearch.do http://www.szwzgs.gov.cn/JeecmsH/jeecms/ArtiSearch.do?count=10&searchKey=%BA%CD%C6%BD http://www.cnacce.org.cn/jeecms/ArtiSearch.do?count=10&searchKey=%D5%C2%B3%CC http://61.167.199.228/kejichu/jeecms/ArtiSearch.do?count=10&searchKey=%BA%CD%C6%BD http://nurse.nfyy.com/jeecms/ArtiSearch.do?count=10&searchKey=%BA%CD%C6%BD http://itrc.jju.edu.cn/situation_policy/jeecms/ArtiSearch.do?count=10&searchKey=%C1%BD%BB%E1 http://www.chnsys.com.cn/jeecms/ArtiSearch.do?count=10&searchKey= http://www.wzsng.com/jeecms/ArtiSearch.do http://en.hnist.cn/jeecms/ArtiSearch.do?count=10&searchKey=Search+here... http://www.daligl.com:8069/jinye/jeecms/ArtiSearch.do?count=10&searchKey=%D7%A8%C2%F4%B5%EA http://www.nxmy.com/jeecms/ArtiSearch.do?count=10&searchKey=%BA%CD%C6%BD http://www.lxst.net/fiberlms/jeecms/ArtiSearch.do?count=10&searchKey=%E8%AF%B7%E8%BE%93%E5%85%A5%E6%90%9C%E7%B4%A2%E5%86%85%E5%AE%B9&chnlId= http://www.qqtech.com/jeecms/ArtiSearch.do?count=30&searchKey=%D5%BE%C4%DA%CB%D1%CB%F7 http://www.tspec.cn/jeecms/jeecms/ArtiSearch.do?count=10&searchKey=%BA%CD%C6%BD http://www.cnbmtech.com/cms/jeecms/ArtiSearch.do?searchKey=%E6%90%9C%E7%B4%A2 http://www.junkai.net/cms/jeecms/ArtiSearch.do?count=10&searchKey=%C9%FA%CC%AC http://www.sportmonline.cn/TiCMS/jeecms/ArtiSearch.do?count=10&searchKey= http://www.qsnedu.com/jeecms/ArtiSearch.do http://www.yxren.net/jeecms/ArtiSearch.do?count=10&searchKey=%BA%CD%C6%BD http://www.ppack.net/cms/jeecms/ArtiSearch.do?count=15&searchKey= http://www.hohutest.com/jeecms/ArtiSearch.do?count=16&searchKey=%B9%A6%C4%DC%B2%E2%CA%D4 http://www.kangbtall.com/jeecms/ArtiSearch.do?count=10&searchKey=%BF%B9%B0%D7%CC%C0 http://www.ctctct.com/jeecms/ArtiSearch.do?count=10&searchKey=%BA%CD%C6%BD http://www.ahctc.com:8080/jyb/jeecms/ArtiSearch.do?count=10&searchKey=%E7%AB%99%E5%86%85%E5%85%A8%E6%96%87%E6%A3%80%E7%B4%A2%EF%BC%8C%E8%AF%B7%E8%BE%93%E5%85%A5%E5%85%B3%E9%94%AE%E5%AD%97&chnlId= ``` ### 漏洞证明： http://www.wwxzfw.gov.cn/jeecms/ArtiSearch.do?count=10&searchKey=a%27+and+1%3D1&chnlId= [<img src="https://images.seebug.org/upload/201408/14003046bacc97319a75f0a27dfc3573c2c2eb89.jpg" alt="1.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201408/14003046bacc97319a75f0a27dfc3573c2c2eb89.jpg) [<img src="https://images.seebug.org/upload/201408/14003057430d924452dacc70e83fbd3a32872457.jpg" alt="2.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201408/14003057430d924452dacc70e83fbd3a32872457.jpg) http://www.cnfamily.com/family/jeecms/ArtiSearch.do?count=10&searchKey=%C1%BD%BB%E1 [<img src="https://images.seebug.org/upload/201408/14003137735f51feafeed9a8d32f493fd64d3f07.jpg" alt="3.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201408/14003137735f51feafeed9a8d32f493fd64d3f07.jpg) http://www.qsng.cn/jeecms/ArtiSearch.do?searchKey=%CA%D3%C1%A6 [<img src="https://images.seebug.org/upload/201408/14003218451642dd511ffcab3bee982b12aed05f.jpg" alt="4.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201408/14003218451642dd511ffcab3bee982b12aed05f.jpg) http://www.gykj.gov.cn/jeecms/ArtiSearch.do [<img src="https://images.seebug.org/upload/201408/14003252b7dd3b4fa140f3312284ce12d6eea9c8.jpg" alt="5.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201408/14003252b7dd3b4fa140f3312284ce12d6eea9c8.jpg) [<img src="https://images.seebug.org/upload/201408/1400331962dc724326f800758da2e8cb248115ec.jpg" alt="6.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201408/1400331962dc724326f800758da2e8cb248115ec.jpg) http://www.szwzgs.gov.cn/JeecmsH/jeecms/ArtiSearch.do?count=10&searchKey=%BA%CD%C6%BD [<img src="https://images.seebug.org/upload/201408/140034173f2f3b8ea54fc1dd133d158268785009.jpg" alt="7.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201408/140034173f2f3b8ea54fc1dd133d158268785009.jpg)