數字化校園平台 校園綜合管理系統 任意文件上傳漏洞

From PwnWiki
Revision as of 21:35, 8 July 2021 by Pwnwiki (talk | contribs) (Marked this version for translation)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Other languages:
Chinese • ‎中文（繁體）‎

漏洞利用

企業用戶註冊： 

https://<target>/DC_Login/QYSignUp

企業相關證書處可以任意上傳文件，可以直接Getshell。

Retrieved from "https://pwnwiki.com/index.php?title=數字化校園平台_校園綜合管理系統_任意文件上傳漏洞&oldid=6567"