Description
My Little Forum 2.3.7 - Source Code Disclosure,此论坛为国外论坛，可以导致敏感的文件被下载。
My Little Forum download_backup_file 参数存在任意文件下载漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://bealright.github.io/2019/10/24/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8B%E8%BD%BD%E6%BC%8F%E6%B4%9E/
https://patents.google.com/patent/CN109194670A/zh
https://zhuanlan.zhihu.com/p/81861246004
https://www.cnblogs.com/xiaozi/p/10601513.html
https://blog.csdn.net/csjjjd/article/details/143826434
https://github.com/eeeeeeeeee-code/POC
https://rivers.chaitin.cn/blog/cq951i90lnechd244hu0
https://ddpoc.com/DVB-2025-8794.html
https://cloud.tencent.com/developer/article/2600433
https://yaklang.com/Yaklab/wiki/CommonVulnerabilities/AnyFileDownload/
https://juejin.cn/post/6950953250472329224
https://www.pldsec.com/servicedetail.aspx?id=992B9C0316522EE0
https://www.moonsec.com/3908.html
https://developer.aliyun.com/article/1609827
https://forum.nocobase.com/t/topic/4941
https://qkl.seebug.org/category/arbitrary-file-download
https://www.ctfiot.com/152315.html
https://bbs.huaweicloud.com/blogs/448131
https://zeroday.hitcon.org/vulnerability/ZD-2018-01644
https://www.secrss.com/articles/7284
https://cn-sec.com/archives/1177113.html
https://x.threatbook.com/v5/article?threatInfoID=145263
https://segmentfault.com/a/1190000044342660
https://www.secpulse.com/archives/5767.html
https://mdr.skyeye.qianxin.com/forum/share/2628