Description
深信服 应用交付报表系统 download.php 文件存在任意文件读取漏洞，攻击者通过漏洞可以下载服务器任意文件
深信服应用交付报表 /download.php 任意文件读取漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/pursue-security/p/17666147.html
https://stack.chaitin.com/vuldb/detail/46f4649f-1b89-4460-8b3a-d2173e97348c
https://zhuanlan.zhihu.com/p/637165319
https://www.saury.net/2100.html
https://www.ddpoc.com/DVB-2023-4519.html
https://rivers.chaitin.cn/vuldb/46f4649f-1b89-4460-8b3a-d2173e97348c
https://github.com/achuna33/MYExploit/blob/master/src/main/java/com/achuna33/Controllers/SangForController.java
https://peiqi.wgpsec.org/wiki/webapp/%E6%B7%B1%E4%BF%A1%E6%9C%8D/%E6%B7%B1%E4%BF%A1%E6%9C%8D%20%E5%BA%94%E7%94%A8%E4%BA%A4%E4%BB%98%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%20login%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.html
https://blog.csdn.net/e4f5g6h/article/details/152163778