POJIA破甲
地图 / LFI on Accounting server and RCE on FliteThermostat admin server

LFI on Accounting server and RCE on FliteThermostat admin server

信息泄露 / File and Directory Information Exposure / #509080

厂商
50m-ctf
严重程度
未评级
赏金
—
弱点
File and Directory Information Exposure
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 50m-ctf 所有

同类报告

File listing through scripts folderTennessee Valley Authority · 2024-02-09Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://████U.S. Dept Of Defense · 2021-07-29Production Key and Data Found on Subdomain No Longer Operated by Shopify / Dangling DNSShopify · 2024-05-01Public and secret api key leaked via Solana BBP github repoSolana BBP · —Cookie exposure due to unexpected file permission changecurl · 2025-10-27Directory Listing at https://█.█.█.█8x8 · 2022-11-18