제출 #553372: lingmeng oa_system 1.0 Download any file
| 제목 | lingmeng oa_system 1.0 Download any file |
|---|---|
| 설명 | In this system, the parameter startpath.replace allows executable file downloads, allowing attackers to obtain important information about the website builder. I think this problem is very serious and causes serious information leakage. |
| 원천 | ⚠️ https:/ |
| 사용자 | lingmeng (UID 83892) |
| 제출 | 2025. 04. 08. AM 10:46 (1 년도 ago) |
| 모더레이션 | 2025. 04. 16. AM 03:21 (8 days later) |
| 상태 | 수락 |
| VulDB 항목 | 304975 [misstt123 oasys 1.0 /show image 디렉토리 순회] |
| 포인트들 | 16 |