Description
齐治堡垒机 worksheet_check.php文件，没有进行权限检查，导致无需登录就可以访问页面。变量过滤不严，导致远程命令执行漏洞。
齐治堡垒机 /worksheet_check.php 路径存在远程命令执行
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/0day-li/p/13663525.html
https://stack.chaitin.com/vuldb/detail/5cb233d9-e5a6-4973-9f93-61ec4cb7dd05
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E9%BD%90%E6%B2%BB%E5%A0%A1%E5%9E%92%E6%9C%BA/%EF%BC%88CNVD-2019-17294%EF%BC%89%E9%BD%90%E6%B2%BB%E5%A0%A1%E5%9E%92%E6%9C%BA%20%E5%90%8E%E5%8F%B0%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://mrxn.net/Infiltration/297.html
https://baizesec.github.io/bylibrary/%E6%BC%8F%E6%B4%9E%E5%BA%93/04-%E5%8E%82%E5%95%86%E6%BC%8F%E6%B4%9E/%E9%BD%90%E6%B2%BB%E5%A0%A1%E5%9E%92%E6%9C%BA%E5%89%8D%E5%8F%B0%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://www.hedysx.com/2631.html
https://www.saury.net/2401.html
https://blog.csdn.net/qq_44657899/article/details/118254544
https://qkl.seebug.org/vuldb/ssvid-98383