e-Learning /downloadFile.jsp 路径存在任意文件下载漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• PoCCVE-2021-3239: E-Learning System 1.0 - SQL Injection
• PoCunauth-mulesoft-dataweave: MuleSoft DataWeave Interactive Learning Environment - Unauthenticated Access
• E-Learning存在SQL注入漏洞(CVE-2021-3239)
• 易宝OA /api/files/DownloadFile2 文件读取漏洞
• PoC天地伟业 Easy7 /Easy7/rest/file/downloadFile 文件读取漏洞
• 友加畅捷管理系统 /Controllers/ajax/downloadfile.ashx 文件读取漏洞
• PoCCVE-2022-38553: Academy Learning Management System <5.9.1 - Cross-Site Scripting
• PoCCVE-2022-45917: ILIAS eLearning <7.16 - Open Redirect
• PoCCVE-2021-3239: E-Learning System v1.0 SQL注入基于时间盲注漏洞
• PoCe-learning-system-authentication-bypass-rce: E-Learning System 1.0 - Authentication Bypass
• PoCWebOne 劳动力与考勤管理套件 /webForms/Download/DownloadFile.aspx 文件读取漏洞