Lucene search
+L

1 matches found

seebug.org
seebug.org
added 2014/05/27 12:0 a.m.22 views

Srun3000命令执行第5弹

简要描述: 第5弹 详细说明: 这回是post的命令执行而且需要注释掉后面的参数。 if $POST'act' == "auth" $command = "/srun3/radius/bin/radtest ".trim $POST'uname' ." ".trim $POST'pass' ." ".$array'serverip'." 10 ".$array'secret'; //后面注释掉就好 if $fp = popen $command, "r" //这里 $con = fread $fp, 10240 ; pclose $fp ; 漏洞证明:...

7.1AI score
SaveExploits0
Rows per page
Query Builder