add ShuipFCMS authcode leak and RCE

This commit is contained in:
corp0ra1 authored and GitHub committed 2021-08-02 21:38:37 +08:00
1 parent 544904aaf7
commit 97a4653940
2 files changed
+9

No files matched your search

@@ -0,0 +1,9 @@
# ShuipFCMS authcode leak and RCE
Shuipfcms is a content management system based on ThinkPHP framework and developed by independent grouping. The vulnerability exists in shuipfcms, which can be exploited by an attacker to gain control of the server
**FOFA query rule**: [header="X-Powered-By: ShuipFCMS"](https://fofa.so/result?qbase64=aGVhZGVyPSJYLVBvd2VyZWQtQnk6IFNodWlwRkNNUyI%3D)
# Demo
![](ShuipFCMS_authcode_leak_and_RCE.gif)
Binary file not shown.

After

Width:  |  Height:  |  Size: 1.4 MiB