提交 #553372: lingmeng oa_system 1.0 Download any file
| 标题 | lingmeng oa_system 1.0 Download any file |
|---|---|
| 描述 | In this system, the parameter startpath.replace allows executable file downloads, allowing attackers to obtain important information about the website builder. I think this problem is very serious and causes serious information leakage. |
| 来源 | ⚠️ https:/ |
| 用户 | lingmeng (UID 83892) |
| 提交 | 2025-04-08 10時46分 (2 年前) |
| 管理 | 2025-04-16 03時21分 (8 days later) |
| 状态 | 已接受 |
| VulDB条目 | 304975 [misstt123 oasys 1.0 /show image 目录遍历] |
| 积分 | 16 |