Description
金盘移动图书馆系统 download.jsp 文件存在任意文件下载漏洞，可导致系统敏感信息泄露
金盘移动图书馆系统 download.jsp 任意文件下载
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cn-sec.com/archives/2090983.html
https://sechub.in/view/2737858
https://github.com/Lern0n/Lernon-POC/blob/main/wpoc/%E9%87%91%E7%9B%98/%E9%87%91%E7%9B%98%E7%A7%BB%E5%8A%A8%E5%9B%BE%E4%B9%A6%E9%A6%86%E7%B3%BB%E7%BB%9Fdownload.jsp%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md