Description
Hikvision Intercom Broadcasting System是中国海康威视（Hikvision）公司的一个对讲广播系统。 Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK)版本存在路径遍历漏洞，该漏洞源于文件/php/exportrecord.php的参数downname会导致路径遍历。
Hikvision Intercom Broadcasting System 路径遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://stack.chaitin.com/vuldb/detail/2413237e-0660-4813-953b-7238303db1a6
https://avd.aliyun.com/detail?id=AVD-2023-6893
https://nvd.nist.gov/vuln/detail/CVE-2023-6893
https://www.cvedetails.com/cve/CVE-2023-6893/
https://vuldb.com/?id.248252
https://fortiguard.fortinet.com/encyclopedia/ips/55833
https://cve.imfht.com/detail/CVE-2023-6893?lang=en
https://github.com/trickest/cve/blob/main/2023/CVE-2023-6893.md
https://dbugs.ptsecurity.com/vulnerability/PT-2023-32803