References https://qkl.seebug.org/appdir/JCMS(Hanweb) http://wooyun.2xss.cc/bug_detail.php?wybug_id=wooyun-2014-075585 https://qkl.seebug.org/appdir/JCMS(Hanweb) https://zygolabialis53.rssing.com/chan-23792314/article2799.html
Related Vulnerabilities大汉JCMS /showBigThumb.do 路径存在远程命令执行漏洞大汉JCMS /tem/downfile.jsp 存在任意文件下载大汉JCMS /sendreport/downfile.jsp 路径存在任意文件下载大汉JCMS /m_5_9/downfile.jsp 存在任意文件下载漏洞大汉JCMS /oss/downfile.jsp 存在任意文件下载漏洞大汉JCMS /columncount/downfile.jsp 路径 filename 参数存在任意文件下载大汉JCMS /jsearch/down.jsp 路径存在任意文件下载大汉JCMS /guestbook/opr_readfile.jsp 存在任意文件读取大汉JCMS /design/readxml.jsp 存在任意文件读取大汉JCMS /m_5_1/attach_dwn.jsp 路径存在任意文件读取漏洞大汉JCMS /lm/sys/opr_uploadimg.jsp 存在任意文件上传漏洞大汉JCMS VerifyCodeServlet 接口存在任意文件上传漏洞大汉JCMS Session 重置致后台鉴权绕过