admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-06 10:41:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
GobyVuls/Dwsurvey/Dwsurvey_3_2_Arbitrary_File_Read
History

README.md

Dwsurvey 3.2 Arbitrary File Read

DWSurvey is a convenient, efficient and stable survey questionnaire system, an open source questionnaire form system based on JAVA WEB. The filePath parameter of the ToHtmlServlet.java file in the dwsurvey-oss-v3.2.0 version has an arbitrary file reading vulnerability.

FOFA query rule: app="DIAOWEN-问卷表单系统"

Demo

Dwsurvey_3_2_Arbitrary_File_Read