禾匠-点企来客服系统 Cookie 认证绕过漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://zhuanlan.zhihu.com/p/1932214870562047555
• https://github.com/hackoadmin/POC2/blob/main/%E7%82%B9%E4%BC%81%E6%9D%A5%E5%AE%A2%E6%9C%8D%E7%B3%BB%E7%BB%9F/%E7%82%B9%E4%BC%81%E6%9D%A5%E5%AE%A2%E6%9C%8D%E7%B3%BB%E7%BB%9F%E5%AD%98%E5%9C%A8%E7%A1%AC%E7%BC%96%E7%A0%81%E6%BC%8F%E6%B4%9E.md
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%82%B9%E4%BC%81%E6%9D%A5%E5%AE%A2%E6%9C%8D%E7%B3%BB%E7%BB%9F/%E7%82%B9%E4%BC%81%E6%9D%A5%E5%AE%A2%E6%9C%8D%E7%B3%BB%E7%BB%9Fgetwaitnum%E5%AD%98%E5%9C%A8sql%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://www.ddpoc.com/DVB-2024-8067.html
• https://6cloudtech.com/portal/article/index/id/1369.html
• https://zhuanlan.zhihu.com/p/4249525215
• https://github.com/Lern0n/Lernon-POC/blob/main/wpoc/%E7%82%B9%E4%BC%81%E6%9D%A5%E5%AE%A2%E6%9C%8D%E7%B3%BB%E7%BB%9F/%E7%82%B9%E4%BC%81%E6%9D%A5%E5%AE%A2%E6%9C%8D%E7%B3%BB%E7%BB%9F%E5%AD%98%E5%9C%A8%E7%A1%AC%E7%BC%96%E7%A0%81%E6%BC%8F%E6%B4%9E.md

Related Vulnerabilities

• PoCCVE-2022-44727: PrestaShop lgcookieslaw - SQL Injection
• PoCCVE-2025-11693: Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure
• PoCCVE-2023-3388: Beautiful Cookie Consent Banner < 2.10.2 - Cross-Site Scripting
• PoCCVE-2016-4437: Apache Shiro 1.2.4 Cookie RememberME - Deserial Remote Code Execution Vulnerability
• PoCCVE-2017-9822: DotNetNuke 5.0.0 - 9.3.0 - Cookie Deserialization Remote Code Execution
• PoCCVE-2019-10405: Jenkins <=2.196 - Cookie Exposure
• PoCCVE-2022-0147: WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting
• PoCCVE-2024-33610: Sharp Multifunction Printers - Cookie Exposure
• PoCCVE-2025-47813: Wing FTP Server <= 7.4.3 - Path Disclosure via Overlong UID Cookie
• PoCCNVD-2021-09693: WeiPHP5.0 任意用户Cookie伪造
• PoCseeyon-oa-cookie-leak-login-bypass: Seeyon OA Cookie Leakage
• PoCmaike-ras-cookie-bypass: 科迈 RAS系统 Cookie验证越权漏洞
• PoCrhaphp-universal-cookie: RHaphp universal cookie