EduSoho系统 app_dev.php 任意文件读取漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.ddpoc.com/DVB-2023-5212.html
• https://www.ddpoc.com/DVB-2023-5789.html
• https://github.com/adysec/POC/blob/main/wpoc/EduSoho/EduSoho%E6%95%99%E5%9F%B9%E7%B3%BB%E7%BB%9Fclassropm-course-statistics%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
• https://blog.csdn.net/jjjj1029056414/article/details/135879956
• https://cn-sec.com/archives/2451582.html
• https://github.com/Threekiii/Awesome-POC
• https://peiqi.wgpsec.org/dynamic/
• https://cn-sec.com/archives/2523189.html
• https://github.com/Nriver/wy876-POC

Related Vulnerabilities

• PoCedusohu-classroom-course-statistics-fileread: Edusoho网络课堂cms存在任意文件读取
• PoCCNVD-2023-03903: EduSoho < v22.4.7 - Local File Inclusion
• Symfony app_dev.php 信息泄露漏洞
• EduSoho教培系统 存在任意文件读取漏洞(CNVD-2023-03903)
• EduSoho教培系统app_dev.php的open接口 任意文件读取漏洞
• EduSoho 教培系统 open 文件 file 参数文件读取漏洞
• edusoho 教培系统 classroom-course-statistics 任意文件读取漏洞（CNVD-2023-03903）