中科网威防火墙CommandsPolling.php filename参数-任意文件读取

2021-01-19 中科网威防火墙 PoC No

Description

【漏洞对象】中科网威防火墙 【漏洞描述】中科网威防火墙(NPFW)/direct/polling/CommandsPolling.php文件filename参数任意文件读取，导致网站处于极度不安全状态。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities