admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-06-20 01:40:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
GobyVuls/Dwsurvey/Dwsurvey_3_2_Arbitrary_File_Read/README.md
xiaoheihei1107 fb021a795a
Add Dwsurvey 3.2 Arbitrary File Read
2021-09-24 18:19:51 +08:00

530 B
Raw Permalink Blame History

Dwsurvey 3.2 Arbitrary File Read

DWSurvey is a convenient, efficient and stable survey questionnaire system, an open source questionnaire form system based on JAVA WEB. The filePath parameter of the ToHtmlServlet.java file in the dwsurvey-oss-v3.2.0 version has an arbitrary file reading vulnerability.

FOFA query rule: app="DIAOWEN-问卷表单系统"

Demo

Dwsurvey_3_2_Arbitrary_File_Read