Description
DataCube3 是日本F-logic公司的一个小型测量终端系统。DataCube3 的/admin/exec.php接口存在SQL注入漏洞，攻击者可获取数据库密码登敏感信息。
DataCube3 exec.php SQL 注入漏洞（CVE-2024-25833）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-25833
https://www.cve.org/CVERecord?id=CVE-2024-25833
https://neroteam.com/blog/f-logic-datacube3-vulnerability-report
https://attackerkb.com/topics/suEGUJ0XD0/cve-2024-25833
https://github.com/advisories/GHSA-8mv9-w6jc-hxmg
https://www.fortiguard.com/encyclopedia/ips/57374
https://strobes.co/vi/cve/CVE-2024-25833
https://cve.imfht.com/detail/CVE-2024-25833?lang=en