Description
久其财务报表5.5.20190326 for bea_jrockit1.5 版本 download.jsp存在任意文件读取漏洞，攻击者通过漏洞可以获取服务器上的信息。
久其财务报表 download.jsp 存在任意文件读取漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/%E4%B9%85%E5%85%B6%E8%B4%A2%E5%8A%A1%E6%8A%A5%E8%A1%A8-download.jsp-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
https://ddpoc.com/DVB-2025-9115.html
https://disk.scan.cm/All_wiki/%E4%BD%A9%E5%A5%87PeiQi-WIKI-POC-2021-7-20%E6%BC%8F%E6%B4%9E%E5%BA%93/PeiQi_Wiki/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/%E4%B9%85%E5%85%B6%E8%BD%AF%E4%BB%B6/%E4%B9%85%E5%85%B6%E8%B4%A2%E5%8A%A1%E6%8A%A5%E8%A1%A8%20download.jsp%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md?hash=zE0KEPGJ