References https://www.cnvd.org.cn/flaw/show/CNVD-2016-06371 https://avd.aliyun.com/product?prod=webnms_framework&page=-367 https://47.101.61.67/detail?id=AVD-2016-6601 https://vulners.com/nuclei/NUCLEI:CVE-2016-6601 https://zone.ci/e/tags/?tagname=CNVD-2016-06371 https://nvd.nist.gov/vuln/detail/CVE-2016-6601 https://www.cert.org.cn/publish/main/upload/File/2016CNVD34.pdf
Related VulnerabilitiesPoCCVE-2026-39352: Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path TraversalPoCfrappe-default-login: Frappe Framework - Default Login CredentialsPoCCVE-2025-41242: Spring Framework - Path TraversalPoCCVE-2024-38819: Spring Framework Path Traversal in Functional Web FrameworksServerless Framework 未授权 命令注入漏洞Astro Web Framework Cloudflare /_image 服务器端请求伪造漏洞(CVE-2025-58179)Spring Framework路径遍历漏洞(CVE-2024-38819)Vmware Spring Framework 逻辑缺陷漏洞OpenOrange Business Framework访问控制错误漏洞(CVE-2024-42048)PoCCVE-2020-0646: Microsoft .NET Framework - Remote Code ExecutionPoCspring4shell-CVE-2022-22965: Spring Framework RCE via Data Binding on JDK 9+PoCCVE-2016-6601: ZOHO WebNMS Framework <5.2 SP1 - Local File Inclusion