Post

Smartoa Emaildownload Ashx Arbitrary File Download Vulnerability

Posted
By Rhy0z
1 min read
Smartoa Emaildownload Ashx Arbitrary File Download Vulnerability

SmartOA EmailDownload.ashx Arbitrary File Download Vulnerability

Vulnerability Description

Zhiming SmartOA EmailDownload.ashx file has any file download vulnerability. Through the vulnerability, you can download sensitive files on the server and view sensitive information.

Vulnerability Impact

SmartOA

Network surveying and mapping

Vulnerability reappears

Login page

img

Verify POC

1

/file/EmailDownload.ashx?url=~/web.config&name=web.config

img

This post is licensed under CC BY 4.0 by the author.