漏洞描述
厦门四信通信科技有限公司是一家专注于LoRa、NB-IoT、ZigBee、2.5G、3G、4G、5G等无线通讯模组和终端产品，其中监控管理主机Web系统存在备份文件下载，通过db文件可以查看到账户密码，用户进入后台可进行敏感性操作。
厦门四信监控管理主机 backup.zip 敏感信息泄露
PoC代码
暂无相关漏洞推荐
- backup-files: Compressed Backup File - Detect
- POC cache-automatic-backups-disabled: ElastiCache Automatic Backups - Disabled
- POC rds-automated-backup-disabled: RDS Automated Backups - Disabled
- POC rds-backup-enable: RDS Automated Backup Check
- POC azure-appservice-backup-not-enabled: Azure App Service Automated Backup Not Configured
- POC azure-appservice-backup-retention-missing: Azure App Service Backup Retention Not Configured
- POC azure-postgresql-geo-backup-disabled: Azure PostgreSQL Geo-Redundant Backup Not Enabled
- POC gcloud-filestore-no-backups: Filestore Instance Not Using On-Demand Backup
- POC gcloud-gke-backups-disabled: GKE Clusters Without Backups Enabled
- POC gcloud-sql-backups-disabled: Automated Backups Not Enabled for Cloud SQL Instances
- POC adb-backup-enabled: ADB Backup Enabled
- POC backup-directory-listing: Backup Directory Listing - Detect
- POC froxlor-database-backup: Froxlor Server Management Backup File - Detect