Adminer <6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass

脆弱性概要 脆弱性名称: Adminer 6.1.1以前のUTF-8 BOMを用いたSQLite ATTACH迂回によるリモートコード実行（RCE） 脆弱性種別: リモートコード実行（RCE） 脆弱性説明: Adminerのバージョンが6.1.1より古い場合、攻撃者はUTF-8 BOMおよびSQLite ATTACHの迂回メカニズムを利用して、リモートコード実行を達成できます。 影響範囲 影響を受けるバージョン: Adminer 6.1.1以前の全バージョン 修正方針 修正推奨事項: 脆弱性を修正するため、Adminerを6.1.1以降にアップグレードしてください。 POCコード ```python POCコードの例 import requests url = "http://target/adminer.php" payload = "SELECT LOAD_FILE('/etc/passwd')" リクエストの構築 response = requests.post(url, data={"username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "localhost", "username": "admin", "password": "password", "server": "loca

目標達成すべての支援者に感謝 — 100%達成しました！

Adminer <6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass

このソースからの他の記事

目標達成 すべての支援者に感謝 — 100%達成しました！

Adminer <6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass

このソースからの他の記事

目標達成すべての支援者に感謝 — 100%達成しました！