References https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/%E9%9C%86%E6%99%BA%E7%A7%91%E6%8A%80-VA%E8%99%9A%E6%8B%9F%E5%BA%94%E7%94%A8%E5%B9%B3%E5%8F%B0-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md https://zhuanlan.zhihu.com/p/644187505 https://github.com/gallopsec/EAA https://cn-sec.com/archives/1888501.html https://cn-sec.com/archives/4072069.html https://github.com/gallopsec/EAA/blob/main/EAA.py https://deded.de/archives/f0a57a30-9918-4f6d-94f6-a7eca4aef2e8 https://s4e.io/tools/eaa-application-access-system-arbitrary-file-read
Related Vulnerabilitiescellinxnvt-getfilecontent-cgi-fileread: Cellinx NVT - GetFileContent.cgi - FileReadesafenet-sql-mysql-fileread: 亿赛通未授权文件下载huatiandongli-ntkodownload-fileread: 华天动力 ntkoDownload 任意文件读取huatiandongli-templateservice-fileread: 华天动力 ntkoDownload 任意文件读取huijietong-cloud-fileread: Huijietong Cloud File Readsangfor-reporter-anyfileread: Sangfor reporter 任意文件读取yonyou-nc-portalfile-fileread: 用友NC portal/file 任意文件读取漏洞PoC1panel-loadfile-fileread: 1Panel loadfile 后台文件读取漏洞PoCapache-solr-remotestreaming-anyfileread: Apache Solr RemoteStreaming 任意文件读取PoCarray-vpn-addfolder-fileread: ArrayVPN 任意文件读取漏洞PoCbohuawanglong-arp-scan-fileread: 中科博华网龙网关 arp_scan.php 任意文件读取漏洞PoCcasdoor-static-fileread: Casdoor 任意文件读取漏洞PoCcrocus-service-do-fileread: 锐明技术Crocus系统存在任意文件读取