anwsion漏洞小礼包

- AV AC AU C I A
发布: 2025-04-13
修订: 2025-04-13

### 简要描述: 小礼包=小礼物? ### 详细说明: 1.数据库配置信息泄漏 http://wenda.anwsion.com/system/config/database.php_bak 2.SQLI 一个http://wenda.anwsion.com/category/1'" 两个http://wenda.anwsion.com/account/ajax/login_process/ POST:net_auto_login=1&password=123456&post_hash=9ed50d5bb8509404&return_url=http%3A%2F%2Fwenda.anwsion.com%2F&user_name=%5c 3.SVN http://wenda.anwsion.com/.svn/entries http://wenda.anwsion.com/app/.svn/entries http://wenda.anwsion.com/static/.svn/entries http://wenda.anwsion.com/models/.svn/entries http://wenda.anwsion.com/install/.svn/entries http://wenda.anwsion.com/system/.svn/entries http://wenda.anwsion.com/views/.svn/entries 4.error message 泄漏绝对路径 http://wenda.anwsion.com/app/account/ajax.php http://wenda.anwsion.com/app/account/find_password.php http://wenda.anwsion.com/app/account/main.php http://wenda.anwsion.com/app/account/openid.php http://wenda.anwsion.com/app/account/qq.php http://wenda.anwsion.com/app/account/setting.php ### 漏洞证明: [<img...

0%
暂无可用Exp或PoC
当前有0条受影响产品信息