mirror of
https://github.com/Threekiii/Awesome-POC.git
synced 2025-11-07 11:58:05 +00:00
41 lines
525 B
Markdown
41 lines
525 B
Markdown
|
# 蓝海卓越计费管理系统 debug.php 远程命令执行漏洞
|
||
|
|
|
||
|
|
## 漏洞描述
|
||
|
|
|
||
|
|
蓝海卓越计费管理系统 debug.php 存在命令调试页面，导致攻击者可以远程命令执行
|
||
|
|
|
||
|
|
## 漏洞影响
|
||
|
|
|
||
|
|
```
|
||
|
|
蓝海卓越计费管理系统
|
||
|
|
```
|
||
|
|
|
||
|
|
## 网络测绘
|
||
|
|
|
||
|
|
```
|
||
|
|
title=="蓝海卓越计费管理系统"
|
||
|
|
```
|
||
|
|
|
||
|
|
## 漏洞复现
|
||
|
|
|
||
|
|
登录页面如下
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
漏洞代码
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
访问 debug.php页面 远程调试命令执行
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|