同望iPES项目执行控制系统存在任意文件读取漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E5%90%8C%E6%9C%9BOA/%E5%90%8C%E6%9C%9BOA%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3tooneAssistantAttachement.jsp%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
• https://blog.csdn.net/qq_48368964/article/details/142830950
• https://cn-sec.com/archives/3374199.html

Related Vulnerabilities

• 同望iPES项目执行控制系统存在任意文件上传
• 同望iPES项目执行控制系统存在sql注入