References https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/EasyImage-manager.php-%E5%90%8E%E5%8F%B0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://cn-sec.com/archives/1717820.html https://www.saury.net/comprehensive/docs/web-poc/page/7 https://github.com/advisories/GHSA-6gr4-9gjr-4gw8 https://gist.github.com/CongSec/cd3d3ee57b8e6f83c7038e2263c15120 https://www.saury.net/poc-navigation https://cn-sec.com/archives/3240182.html https://github.com/Threekiii/Awesome-POC https://peiqi.wgpsec.org/dynamic/
Related Vulnerabilities旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞上海小羚羊软件股份有限公司小羚羊ERP系统downloadView存在任意文件读取漏洞中成科信票务管理系统 /SystemManager/TicketSystem/ReturnTicketPlance.ashx SQL 注入漏洞中成科信票务管理系统 /SystemManager/Planetarium/ReserveTicketManagerPlane.ashx SQL 注入漏洞仁和兴业(深圳)软件有限公司仁和云ERP attachmentdownloadAttachment 接口存在任意文件读取漏洞PoCCVE-2020-10204: Sonatype Nexus Repository Manager 3 - Remote Code ExecutionPoCccm-detect: Clear-Com Core Configuration Manager Panel - DetectPoCmonitorr-file-upload: Monitorr Services Configuration - Arbitrary File Upload智慧物联网综合服务平台ListFileManager存在目录枚举漏洞玉帛软件仓库管理系统DownloadFile存在任意文件读取漏洞安科瑞EMS企业微电网能效管理平台 /SubstationWEBV2/main/appDownload 文件读取漏洞云连ERP管理系统 /gateway/download!download.action 代码执行漏洞泛微 e-cology10 /papi/em/transform/downLoadSyslog 文件读取漏洞