Hanweb mailwrite_over.jsp editpagename-任意文件读取

2021-01-19 Hanweb PoC No

Description

【漏洞对象】Hanweb 【涉及版本】mailwrite_over.jsp editpagename 【漏洞描述】目标存在任意文件读取漏洞,由于editpagename控制不严导致。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities