Z-BLOG Blind-XXE造成任意文件读取

Basic Fields

SSV ID:
SSV-90236
Find Time:
Unknown
Submit Time:
2016-01-08
Level:
Category:
XML 注入
Component:
zblog
Author:
Unknown
Submitter:
anonymous
CVE-ID:
Add
CNNVD-ID:
Add
CNVD-ID:
Add
ZoomEye Dork:
Add

Source

Login to see

Detail

Contributor Knownsec Got  0KB
Login to see
have 0  exchange

PoC (pocsuite 插件) (pocsuite 插件)

Contributor hhxx totally have   1KB
Login to see
have 1 Exchange

Reference Linking

Login to see

Solutions

Login to see
Popularity 2667
Need to bind phone before comment. Bind Now

Unavailable Comments

※Any content provided by this site, only to learn the code and services, not for illegal purposes