天地伟业Easy7 downloadFile 任意文件读取漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://mrxn.net/jswz/easy7-rest-file-downloadFile.html
• https://ddpoc.com/DVB-2025-10358.html
• https://mrxn.net/jswz/easy7-file-downloadNote-file-read.html
• https://cn-sec.com/archives/4701388.html
• https://www.gm7.org/archives/15728
• https://mrxn.net/jswz/easy7-file-downloadResource-file-read.html
• https://www.gm7.org/archives/25794

Related Vulnerabilities

• 玉帛软件仓库管理系统DownloadFile存在任意文件读取漏洞
• 天地伟业Easy7 /Easy7/rest/file/uploadCustomIcon 文件上传漏洞
• 天地伟业 Easy7 /Easy7/rest/downLoad/downLoadImage 文件读取漏洞
• 天地伟业 /Easy7/rest/itsFacility/query SQL 注入漏洞
• 易宝OA /api/files/DownloadFile2 文件读取漏洞
• PoC天地伟业Easy7 IsPermissible 存在SQL注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/inquestRoom/getInquestIdByRoomId SQL 注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/inquestRoom/getInquestRoomChannelInfo SQL 注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/inquestRoom/queryRoomName SQL 注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/inquestRoom/queryRoomConfigs SQL 注入漏洞
• 天地伟业Easy7 /Easy7/rest/inquestRoom/isHashCameraAuth SQL 注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/file/uploadLedImage 文件上传漏洞
• PoC天地伟业Easy7 /Easy7/rest/file/capture 命令执行漏洞