泛微E-office downfile.php-任意文件下载

2021-01-19 泛微Eoffice PoC No

Description

【漏洞对象】泛微e-office 【涉及版本】Weaver OA 8.5 【漏洞描述】漏洞存在于E-mobile/Data/downfile.php,url参数没有有效的过滤,导致可任意文件下载。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities