admin/GobyVuls
1
0 Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2026-10-27 19:10:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add CNVD-2020-30193

Browse Source
This commit is contained in:
xiaoheihei1107 authored and GitHub committed 2021-08-18 10:58:15 +08:00
1 parent 5a374e5976
commit b15aee6e26
1 file changed
+11
Download Patch File Download Diff File Expand all files Collapse all files
AVCON-6/CNVD-2020-30193/README.md
+11
View File
@@ -0,0 +1,11 @@
# AVCON-6 download.action File Read (CNVD-2020-30193)
The AVCON-6 system management platform download.action and org_execl_download.action have arbitrary file download vulnerabilities. Attackers can download arbitrary files on the server through the vulnerabilities.
FOFA **query rule**: [app="AVCON-6"](https://fofa.so/result?qbase64=YXBwPSJBVkNPTi02Ig%3D%3D)
# Demo
![AVCON_6_download_action_File_Read_CNVD_2020_30193](AVCON_6_download_action_File_Read_CNVD_2020_30193.gif)