Files

AVCON-6 download.action File Read (CNVD-2020-30193)

The AVCON-6 system management platform download.action and org_execl_download.action have arbitrary file download vulnerabilities. Attackers can download arbitrary files on the server through the vulnerabilities.

FOFA query rule: app="AVCON-6"

Demo

AVCON_6_download_action_File_Read_CNVD_2020_30193