Awesome-POC/CMS漏洞/Pb-CMS Shiro默认密钥 远程命令执行漏洞.md
2024-11-06 14:10:36 +08:00

31 lines
429 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Pd-CMS Shiro默认密钥 远程命令执行漏洞
## 漏洞描述
Pd-CMS存在Shiro默认密钥攻击者通过已知的密钥将会造成Shiro远程命令执行漏洞
## 漏洞影响
```
Pd-CMS
```
## 网络测绘
```
"pb-cms"
```
## 漏洞复现
主页面
![image-20220518155442570](images/202205181554764.png)
默认密钥
```
3AvVhmFLUs0KTA3Kprsdag==
```
![image-20220518155454512](images/202205181554589.png)