https://shuimugan.com/bug/view?bug_no=191558

 

 

搜狐某站点隐式命令注入Getshell

 

来自 <https://shuimugan.com/bug/view?bug_no=191558>

 

 

 

 

 

表达式注入

https://shuimugan.com/bug/view?bug_no=195968 

神器而已之EMobile某版本表达式注入（命令执行）

 

来自 <https://shuimugan.com/bug/view?bug_no=195968>

 

 

 

资料参考

https://zhuanlan.zhihu.com/p/28823933

 

 

https://websec.readthedocs.io/zh/latest/vuln/tpl.html