Score
0
Watch 129 Star 428 Fork 142

zyx0814 / dzzofficePHP

文件编辑页面存在重大安全问题

Open
andxue  Opened this issue

文章编辑页面没有验证是否登录,直接可以读取查看文件,存在很大的安全问题。
比如:http://demo.dzz.cc/index.php?mod=onlyoffice&path=VlR3VHA3REJQT1lFWm5HY2N4NEpQYWJZSkVjd1RvNURaVEZNcV8wQ2xCSmNiYUNhQ2JQeWIxMTlUQWZ6NXc5dzBoamVhT0l5ZWpSM0dR

total 1 participants

Comments (0)

Sign in to comment

Assignees
Labels
Not set
Projects
Milestones
Branches
Planed to start
Not set
Planed to end
Not set
Top level
Priority
PHP
1
https://gitee.com/zyx0814/dzzoffice.git
git@gitee.com:zyx0814/dzzoffice.git
zyx0814
dzzoffice
dzzoffice

Help Search