泽元-ZCMS /invoke 路径存在任意文件读取

漏洞描述

PoC代码

暂无

相关漏洞推荐

• POC CVE-2019-10647: ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)
• 天锐绿盾审批系统 /trwfe/service/../invoker/findTenantPage.do SQL 注入漏洞
• 天锐绿盾审批系统 /trwfe/login.jsp/.%2e/invoker/findCategoryPage.do SQL 注入漏洞
• zcms-v3-sqli: zcms v3 sqli
• zzcms-zsmanage-sqli: ZzCMS zsmanage sqli
• ZZZCMS /search/ 代码执行漏洞（CVE-2019-9041）
• POC CVE-2019-9041: ZZZCMS 1.6.1 - Remote Code Execution
• POC CVE-2020-20285: ZZcms - Cross-Site Scripting
• POC CVE-2022-23881: ZZZCMS zzzphp 2.1.0 - Remote Code Execution
• POC CVE-2022-40443: ZZCMS 2022 - Path Information Disclosure
• POC zzzcms-parser-search-rce: ZZZCMS parserSearch 远程命令执行漏洞
• POC zcms-v3-sqli: ZCMS - SQL Injection
• POC zzcms-register-xss: Zzcms `register_nodb.php` - Cross Site Scripting