Description
博华网龙由于访问控制不当，攻击者通过未经身份验证的接口可获取系统主机的敏感信息内容。
博华网龙信息安全一体机系统存在任意文件读取漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
http://wy.zone.ci/bug_detail.php?wybug_id=wooyun-2015-0105685
https://peiqi.wgpsec.org/wiki/iot/%E5%8D%9A%E5%8D%8E%E7%BD%91%E9%BE%99/%E5%8D%9A%E5%8D%8E%E7%BD%91%E9%BE%99%E9%98%B2%E7%81%AB%E5%A2%99%20cmd.php%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.html
https://h0e4a0r1t.github.io/2020/10/14/1/
https://www.saury.net/1780.html
https://github.com/Threekiii/Awesome-POC