Arbitrary File Read Vulnerability in Minyou Website Building System

Minyou web site building system is developed by java content management system is mostly used in government, school management system. The Minyou Web site building system has an arbitrary file read vulnerability, which can be exploited by attackers to obtain sensitive information...

File Containment Vulnerability in Minyou Website Builder System

Minyou web site building system is developed by java content management system is mostly used in government, school management system. The product's download.jsp page pathfile parameter exists arbitrary file download vulnerability, poc for: http://host/download.jsp?pathfile=/... /... /... /... /...