U-mail FCGI 解析漏洞

2023-03-27 U-mail PoC No

Description

默认安装的U-Mail使用IIS和PHP中间件,但是以fcgi模式运行的PHP配置中默认cgi.fix_pathinfo=1导致了PHP路径解析漏洞

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities