Awesome-POC/Web应用漏洞/章管家 Druid未授权访问漏洞.md
2022-12-05 11:09:28 +08:00

31 lines
350 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# 章管家 Druid未授权访问漏洞
## 漏洞描述
章管家 Druid存在未授权导致信息泄露漏洞
## 漏洞影响
```
章管家
```
## FOFA
```
章管家登录-公章在外防私盖
```
## 漏洞复现
登录页面
![](./images/202202091905857.png)
验证页面为 **/druid/index.html**
![](./images/202202091905148.png)