Description
LVS精益价值管理系统 /Business/LoginVaild.aspx 接口存在任意文件读取漏洞，可通过参数p构造目录穿越未授权读取文件，获取系统敏感信息。
LVS 精益价值管理系统 /Business/LoginVaild.aspx 文件读取漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.gm7.org/archives/58036
http://152.67.113.27/articles/%E6%9C%80%E6%96%B0POC%E6%B1%87%E6%80%BB+%E2%80%94+2026%E5%B9%B44%E6%9C%88%E5%A4%9A%E4%BA%A7%E5%93%81%E5%A4%9A%E7%B1%BB%E5%9E%8B%E9%80%9F%E9%80%92%E4%B8%8E%E5%BA%94%E6%80%A5%E5%BB%BA%E8%AE%AE_14079896_csdn.html
https://github.com/YuSec2021/GeneralPOC/blob/main/LVS%E7%B2%BE%E7%9B%8A%E4%BB%B7%E5%80%BC%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9FDownLoad.aspx%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
https://www.cnblogs.com/LeouMaster/p/18214025