CVEs-PoC/2018/CVE-2018-10122.md

CVE-2018-10122

Description

QingDao Nature Easy Soft Chanzhi Enterprise Portal System (aka chanzhieps) pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php.

POC

Reference

• https://github.com/goodrain-apps/chanzhieps/issues/1
• https://github.com/goodrain-apps/chanzhieps/issues/1

Github

No PoCs found on GitHub currently.