TPshop后台 弱口令漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://guokeya.github.io/post/YOOIZxLl9/
• https://vulners.com/seebug/SSV:96926
• https://www.cnvd.org.cn/flaw/show/CNVD-2020-51453
• https://blog.csdn.net/bishan4656/article/details/100954411
• https://qkl.seebug.org/vuldb/ssvid-96926
• https://avd.aliyun.com/detail?id=AVD-2021-910292
• https://www.tp-shop.cn/download
• https://qkl.seebug.org/appdir/TPshop

Related Vulnerabilities

• TPshop /index.php 默认口令漏洞
• tpshop-directory-traversal: Tpshop Directory Traversal
• tpshop-sqli: Tpshop sqli
• PoCtpshop-directory-traversal: TPshop - Local File Inclusion
• TPshop API接口存在前台SQL注入(CVE-2020-18164)
• TPshop /test/dlfile 路径存在任意文件上传漏洞
• TPshop v2.0.8 dlfile-获得Shell
• TPshop全版本-SQL注入
• TPshopcms preview-获得Shell
• TPshop index.php file_url参数-远程文件包含
• TPshop 2.0.8 前台-SQL注入
• TPshop- 获得Shell