若依管理系统任意文件下载漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/tzwlhack/Vulnerability/blob/main/%E8%8B%A5%E4%BE%9D(RuoYi)%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%20%E5%90%8E%E5%8F%B0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96.md
• https://www.cnblogs.com/backlion/p/18896463
• https://avd.aliyun.com/detail?id=AVD-2021-897804
• https://doc.ruoyi.vip/ruoyi/document/kslj.html
• https://bbs.huaweicloud.com/blogs/406151
• https://blog.csdn.net/qq_32808455/article/details/135579745
• https://zhuanlan.zhihu.com/p/25211039925
• https://www.ihonker.com/thread-33318-1-1.html
• https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/RuoYi%20CMS/RuoYi%20CMS%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96/
• https://mvip.tophant.com/detail/1642376886531264512
• https://cloud.tencent.com/developer/article/1821587
• https://gitee.com/y_project/RuoYi-Vue/issues/IAFEH0?skip_mobile=true
• https://www.cnblogs.com/shaoqiblog/p/17305315.html
• https://blog.csdn.net/shaotaiban1097/article/details/130843729
• https://blog.51cto.com/u_16170213/6767703
• https://avd.aliyun.com/detail?id=AVD-2021-897804

Related Vulnerabilities

• 若依管理系统 /monitor/cache/getNames 命令执行漏洞
• 若依管理系统 后台定时任务 远程代码执行漏洞
• 若依管理系统 弱口令漏洞