ZK Framework Authentication Bypass

This strike exploits an authentication bypass vulnerability in ZK Java Framework. The vulnerability is due to lack of authentication in ZK AuUploader servlet. A remote unauthenticated attacker can exploit this vulnerability sending a crafted request to the victim server which leads to the disclosure of sensitive files in the context of the webroot.