References https://cn-sec.com/archives/75288.html http://wy.zone.ci/bug_detail.php?wybug_id=wooyun-2013-035794 https://zone.ci/aliyun/ali_nonvd/252450.html https://github.com/hmoytx/WVS/blob/master/poc.md https://www.zixuephp.com/html/hkgf/2015_04/27824.html
Related Vulnerabilities大汉JCMS /showBigThumb.do 路径存在远程命令执行漏洞大汉JCMS /tem/downfile.jsp 存在任意文件下载大汉JCMS /m_5_9/downfile.jsp 存在任意文件下载漏洞大汉JCMS /oss/downfile.jsp 存在任意文件下载漏洞大汉JCMS /columncount/downfile.jsp 路径 filename 参数存在任意文件下载大汉JCMS /jsearch/down.jsp 路径存在任意文件下载大汉JCMS /guestbook/opr_readfile.jsp 存在任意文件读取大汉JCMS /design/readxml.jsp 存在任意文件读取大汉JCMS /m_5_1/attach_dwn.jsp 路径存在任意文件读取漏洞大汉JCMS /lm/sys/opr_uploadimg.jsp 存在任意文件上传漏洞大汉JCMS /idea/opr_import_discussion.jsp 存在任意文件上传漏洞大汉JCMS VerifyCodeServlet 接口存在任意文件上传漏洞大汉JCMS Session 重置致后台鉴权绕过