Description
SCMS 系统的 /download.jsp 接口存在目录遍历漏洞，该接口在处理 url 参数时未对用户输入的路径进行有效校验，攻击者可通过构造 ../ 路径遍历字符，读取服务器上的任意文件，如 /etc/passwd 等敏感系统文件。
SCMS /download.jsp 目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/advisories/GHSA-v72f-5j8q-jfjq
https://blog.csdn.net/weixin_40709439/article/details/86547286
https://www.saury.net/poc-navigation
https://cn-sec.com/archives/3397386.html
http://wiki.timlzh.com/Pentest-Note/%E4%BA%91%E5%AE%89%E5%85%A8/Azure/AzureAD%E8%BF%9E%E6%8E%A5/
https://deded.de/upload/hw%E6%BC%8F%E6%B4%9E%EF%BC%88%E7%9C%9F%EF%BC%89by%20AdySec_%E5%89%AF%E6%9C%AC%20(1).xlsx
https://www.cnblogs.com/xiaozi/p/8723430.html